24697 matches found
CVE-2025-13850
creationtimestamp| type| source ---|---|--- 2025-12-12 08:15:03+00:00| seen| https://gist.github.com/Darkcrai86/cc3b47fe3a8d5d403322fe98a66ef0f6...
HTTP Header Injection
Overview tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. Affected versions of this package are vulnerable to HTTP Header Injection via the reason argument in HTTP status handling. An attacker can inject arbitrary HTTP headers or execute...
CVE-2025-13053
When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification can allow an attacker able to intercept network traffic between the client and server can perform a man-in-the-middle MITM attack, which may obtain the sensitive information of th...
PT-2025-50803
Name of the Vulnerable Software and Affected Versions ADM versions 4.1.0 through 4.3.3.RKD2 ADM versions 5.0.0 through 5.1.0.RN42 Description A weakness exists where a non-enforced TLS certificate verification can allow an attacker intercepting network traffic to perform a man-in-the-middle MITM...
Visualisation for the CIS Benchmark Scanning Results
In this paper, we introduce GraphSecure, a web application that provides advanced analysis and visualisation of security scanning results. GraphSecure enables users to initiate scans for their AWS account, validate them against specific Center for Internet Security CIS Benchmarks and return...
GHSA-5XX2-3Q9W-JPGF
creationtimestamp| type| source ---|---|--- 2025-12-11 21:59:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115703177084650374...
GHSA-W476-J57G-96VP
creationtimestamp| type| source ---|---|--- 2025-12-11 21:28:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115703053115304776...
CVE-2025-14531
creationtimestamp| type| source ---|---|--- 2025-12-11 21:10:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7qiddilvx2e...
CVE-2025-56120
creationtimestamp| type| source ---|---|--- 2025-12-11 18:45:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702415200356592...
CVE-2025-56101
creationtimestamp| type| source ---|---|--- 2025-12-11 18:45:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702415200356592...
CVE-2025-56111
creationtimestamp| type| source ---|---|--- 2025-12-11 18:45:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702415200356592...
CVE-2025-56107
creationtimestamp| type| source ---|---|--- 2025-12-11 18:45:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702415200356592...
CVE-2025-56089
creationtimestamp| type| source ---|---|--- 2025-12-11 18:33:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702365711663519...
CVE-2025-56097
creationtimestamp| type| source ---|---|--- 2025-12-11 18:33:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702365711663519...
CVE-2025-56098
creationtimestamp| type| source ---|---|--- 2025-12-11 18:33:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702365711663519...
CVE-2025-56093
creationtimestamp| type| source ---|---|--- 2025-12-11 18:33:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702365711663519...
CVE-2025-56092
creationtimestamp| type| source ---|---|--- 2025-12-11 18:33:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702365711663519...
CVE-2025-56095
creationtimestamp| type| source ---|---|--- 2025-12-11 18:33:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702365711663519...