133 matches found
CVE-2025-62176 Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels
Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...
CVE-2025-62176 Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels
Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...
PT-2025-41809
Name of the Vulnerable Software and Affected Versions Mastodon versions prior to 4.2.27 Mastodon versions prior to 4.3.14 Mastodon versions prior to 4.4.6 Description Mastodon is a free, open-source social network server based on ActivityPub. The streaming server incorrectly handles authenticatio...
EUVD-2022-34782
Malicious code in bioql PyPI...
CVE-Disclosures
CVE-Disclosures This repository, "CVE Disclosures", serves as...
CVE-2025-20294
creationtimestamp| type| source ---|---|--- 2025-09-02 10:39:43+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkrlld2u 2025-09-02 10:39:44+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkroj32u 2025-09-02 10:39:46+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2022-2527
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1.6, all versions starting from 15.2 befo...
Linux Distros Unpatched Vulnerability : CVE-2024-9680
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this...
TencentOS Server 3: thunderbird (TSSA-2024:0729)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0729 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Spring gRPC Promoted!
It's a few months since we had a blog about Spring gRPC that wasn't just a release announcement. This one marks the first release since the project was promoted from experimental to a full member of the Spring Portfolio. This doesn't change the way you consume the project, but it has some...
CVE-2025-4446
creationtimestamp| type| source ---|---|--- 2025-05-09 00:24:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15645 2025-05-09 00:41:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lop6wvn6lk2p 2025-05-09 01:14:59+00:00| seen|...
CVE-2025-1863
creationtimestamp| type| source ---|---|--- 2025-04-17 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-04 2025-04-18 06:58:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12393 2025-04-18 08:00:17+00:00| seen|...
x-skin.net Cross Site Scripting vulnerability OBB-4041742
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2025-30355
creationtimestamp| type| source ---|---|--- 2025-03-26 23:54:43+00:00| seen| https://bsky.app/profile/element.io/post/3llcybrbt622e 2025-03-27 02:30:13+00:00| published-proof-of-concept| Telegram/9TpCNhQKFnadVGgW9WBxm9NS8GzN0eHgiitUv2OHldFzgpc 2025-03-27 04:06:47+00:00| exploited|...
CVE-2025-27396
creationtimestamp| type| source ---|---|--- 2025-03-11 11:35:11+00:00| seen| Telegram/BUC-FpXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc 2025-03-11 11:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114143638979930528 2025-03-11 12:35:48+00:00| seen|...
Astra Linux – Vulnerability in Firefox and Thunderbird
An attacker was able to execute code in the content process by exploiting a use-after-free in Animation timelines. There have been reports of this vulnerability being exploited in real-world scenarios. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1,...
CVE-2025-1165
creationtimestamp| type| source ---|---|--- 2025-02-11 00:33:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113982440858731555 2025-02-11 01:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuicdxh2y2o 2025-02-11 02:00:19+00:00|...
CVE-2022-2527
An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2.which allowed an authenticated attacker to inject arbitrary content. A victim...
CVE-2024-12825
creationtimestamp| type| source ---|---|--- 2025-02-01 08:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433nwb6i2w 2025-02-01 09:26:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3748 2025-02-01 09:47:57+00:00| seen| https://t.me/cvedetector/17012...
