CVE-2025-62176

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...

EUVD-2025-34111

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...

CVE-2025-62176

Summary : The Mastodon streaming server vulnerability CVE-2025-62176 allows OAuth clients lacking the read:statuses scope to subscribe to public timelines by using any valid authentication token. Affected versions : prior to 4.4.6, 4.3.14, and 4.2.27. Root cause : streaming server accepts events ...

CVE-2025-62176 Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...

CVE-2025-62176 Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...

CVE-2025-62176 Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...

PT-2025-41809

Name of the Vulnerable Software and Affected Versions Mastodon versions prior to 4.2.27 Mastodon versions prior to 4.3.14 Mastodon versions prior to 4.4.6 Description Mastodon is a free, open-source social network server based on ActivityPub. The streaming server incorrectly handles authenticatio...

EUVD-2022-34782

Malicious code in bioql PyPI...

CVE-Disclosures

CVE-Disclosures This repository, "CVE Disclosures", serves as...

CVE-2025-20294

creationtimestamp| type| source ---|---|--- 2025-09-02 10:39:43+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkrlld2u 2025-09-02 10:39:44+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkroj32u 2025-09-02 10:39:46+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2022-2527

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1.6, all versions starting from 15.2 befo...

Linux Distros Unpatched Vulnerability : CVE-2024-9680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this...

TencentOS Server 3: thunderbird (TSSA-2024:0729)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0729 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Spring gRPC Promoted!

It's a few months since we had a blog about Spring gRPC that wasn't just a release announcement. This one marks the first release since the project was promoted from experimental to a full member of the Spring Portfolio. This doesn't change the way you consume the project, but it has some...

CVE-2025-4446

creationtimestamp| type| source ---|---|--- 2025-05-09 00:24:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15645 2025-05-09 00:41:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lop6wvn6lk2p 2025-05-09 01:14:59+00:00| seen|...

CVE-2025-1863

creationtimestamp| type| source ---|---|--- 2025-04-17 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-04 2025-04-18 06:58:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12393 2025-04-18 08:00:17+00:00| seen|...

x-skin.net Cross Site Scripting vulnerability OBB-4041742

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-30355

creationtimestamp| type| source ---|---|--- 2025-03-26 23:54:43+00:00| seen| https://bsky.app/profile/element.io/post/3llcybrbt622e 2025-03-27 02:30:13+00:00| published-proof-of-concept| Telegram/9TpCNhQKFnadVGgW9WBxm9NS8GzN0eHgiitUv2OHldFzgpc 2025-03-27 04:06:47+00:00| exploited|...

CVE-2025-27396

creationtimestamp| type| source ---|---|--- 2025-03-11 11:35:11+00:00| seen| Telegram/BUC-FpXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc 2025-03-11 11:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114143638979930528 2025-03-11 12:35:48+00:00| seen|...

Astra Linux – Vulnerability in Firefox and Thunderbird

An attacker was able to execute code in the content process by exploiting a use-after-free in Animation timelines. There have been reports of this vulnerability being exploited in real-world scenarios. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1,...