CVE-2025-68562

creationtimestamp| type| source ---|---|--- 2025-12-29 22:20:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb5un35lhf2z 2025-12-29 22:20:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb5unnyqau22 2025-12-29 22:51:15+00:00| seen|...

CVE-2025-15204

CVE-2025-15204 affects SohuTV CacheCloud up to version 3.2.0, where the doQuartzList function in QuartzManageController.java is vulnerable to cross-site scripting. The vulnerability can be exploited remotely; exploitation details are publicly disclosed. Connected sources consistently describe the...

CVE-2025-15203 SohuTV CacheCloud ResourceController.java index cross site scripting

A vulnerability was found in SohuTV CacheCloud up to 3.2.0. This impacts the function index of the file src/main/java/com/sohu/cache/web/controller/ResourceController.java. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-53627

creationtimestamp| type| source ---|---|--- 2025-12-29 18:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5irhmoa32u...

[SECURITY] Fedora 43 Update: opentofu-1.11.2-1.fc43

OpenTofu lets you declaratively manage your cloud infrastructure...

CVE-2025-69200

creationtimestamp| type| source ---|---|--- 2025-12-29 16:22:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb5amxbjbg2b 2025-12-29 16:22:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb5anyknsn27 2025-12-29 16:24:16+00:00| seen|...

EUVD-2025-205582

DOM-based Cross-Site Scripting XSS vulnerability in 201206030 novel V3.5.0 allows remote attackers to execute arbitrary JavaScript code or disclose sensitive information e.g., user session cookies via a crafted "wvstest" parameter in the URL or malicious script injection into window.localStorage...

CVE-2025-15225

creationtimestamp| type| source ---|---|--- 2025-12-29 08:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb4el2qvpy2u 2025-12-29 08:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb4elm2ivh27 2025-12-29 08:22:26+00:00| seen|...

Security Bulletin: Vulnerability in markdown-it affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in markdown-it has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

Security Bulletin: Vulnerability in node.js affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in node.js has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerabili...

Security Bulletin: Vulnerability in Python-Future 1.0.0 module affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Python-Future 1.0.0 module has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional...

Security Bulletin: Vulnerability in form-data affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in form-data has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

Security Bulletin: Vulnerability in node.js affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in node.js has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerabili...

CVE-2025-15069

Improper Authentication vulnerability in Gmission Web Fax allows Privilege Escalation.This issue affects Web Fax: from 3.0 before 3.0.1...

CVE-2025-15173

A weakness has been identified in SohuTV CacheCloud up to 3.2.0. Affected is the function advancedAnalysis of the file src/main/java/com/sohu/cache/web/controller/InstanceController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit...

CVE-2025-15171

A vulnerability was identified in SohuTV CacheCloud up to 3.2.0. This affects the function index of the file src/main/java/com/sohu/cache/web/controller/ServerController.java. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly...

CVE-2025-15067

creationtimestamp| type| source ---|---|--- 2025-12-29 01:29:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb3oqizjyx2g 2025-12-29 01:38:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb3p7s6fpc2y 2025-12-29 01:45:15+00:00| seen|...

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect operation of the function index in the file src/main/java/com/sohu/cache/web/controller/ResourceController.java,...

PT-2025-53695

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions up to 3.2.0 Description A security issue exists in SohuTV CacheCloud. This issue allows for cross site scripting, potentially exploitable from a remote location. The vulnerable component is the doAppAuditList functio...

Gmission Web Fax 安全漏洞

Gmission Web Fax is a web-based fax management system from the Korean company Gmission. A security vulnerability exists in Gmission Web Fax version 3.0 prior to version 4.0, which stems from improper authentication and may result in elevated privileges...