1938 matches found
From the Shadows to the Headlines: A Decade of State-Sponsored Cyber Leaks
From the Shadows to the Headlines: A Decade of State-Sponsored Cyber Leaks By Ryan Slaney and Emma DeCarli · January 20, 2026 Executive summary The December 2, 2025, publication of a massive leak revealing the inner workings of the IRGC-linked Department 40 a.k.a. APT35, Charming Kitten, and Fres...
CVE-2025-14463
creationtimestamp| type| source ---|---|--- 2026-01-17 07:23:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcm3fa6ajt2x...
CVE-2025-67077
File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action...
Oracle Linux 9 : postgresql (ELSA-2026-0491)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0491 advisory. - Resolves: RHEL-128812 CVE-2025-12818 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...
CVE-2025-67833
CVE-2025-67833 affects Paessler PRTG Network Monitor and is an XSS vulnerability. Versions prior to 25.4.114 allow an unauthenticated attacker to execute script via the tag parameter. There is no exploitation detail provided beyond this description in the connected documents. Impact is cross-site...
Linux Distros Unpatched Vulnerability : CVE-2025-71143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 clk:...
CVE-2026-22704
HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vulnerable to stored XSS, which could lead to account takeover. This issue has been patched in version 25.0.0...
CVE-2025-71085
creationtimestamp| type| source ---|---|--- 2026-01-13 17:58:22+00:00| seen| https://gist.github.com/Darkcrai86/62a158335697eccd7d6e51a4b76bd19f 2026-03-06 13:10:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgff4w63em24 2026-03-13 00:00:00+00:00| seen|...
CVE-2025-23304
creationtimestamp| type| source ---|---|--- 2026-01-13 17:05:29+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3mcczztpg7q27 2026-01-21 16:30:27+00:00| seen| https://t.me/codebysec/9766...
Description of the security update for SharePoint Server Subscription Edition: January 13, 2026 (KB5002822)
None None...
MiracleLinux 8 : httpd:2.4 (AXSA:2025-10834:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10834:01 advisory. httpd: insufficient escaping of user-supplied data in modssl CVE-2024-47252 httpd: modssl: access control bypass by trusted clients is possible usi...
MiracleLinux 8 : kernel-4.18.0-553.50.1.el8_10 (AXSA:2025-9863:28)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9863:28 advisory. kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: ALSA: usb-audio: Fix out of boun...
CVE-2026-22704 HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover
HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vulnerable to stored XSS, which could lead to account takeover. This issue has been patched in version 25.0.0...
CVE-2023-25816
Nextcloud is an Open Source private cloud software. Versions 25.0.0 and above, prior to 25.0.3, are subject to Uncontrolled Resource Consumption. A user can configure a very long password, consuming more resources on password validation than desired. This issue is patched in 25.0.3 No workaround ...
CVE-2025-32300
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital zoom studio DZS Video Gallery allows Reflected XSS.This issue affects DZS Video Gallery: from n/a through 12.25...
WordPress plugin Frontend Admin by DynamiApps 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
CVE-2025-67918
creationtimestamp| type| source ---|---|--- 2026-01-08 11:00:04+00:00| seen| https://gist.github.com/Darkcrai86/4dce34a100ae0fb464e734a9e9299134 2026-01-08 17:13:56+00:00| seen| Telegram/th--6IaDSr1rDlZynWZbWINS021pVM3F-S9Uc4QWGTyq7M...
EUVD-2026-1525
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup CountDown With Image or Video Background countdown-with-background allows Reflected XSS.This issue affects CountDown With Image or Video Background: from n/a through = 1.5...
CVE-2025-66913
creationtimestamp| type| source ---|---|--- 2026-01-08 02:49:38+00:00| seen| https://gist.github.com/Catherines77/f15d53e9705b24cf018e5bffed3e8234 2026-01-08 20:31:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwt7kcgnp2p 2026-01-08 21:34:28+00:00| seen|...
