openSUSE Security Advisory (SUSE-SU-2025:1450-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:1451-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-0855

creationtimestamp| type| source ---|---|--- 2025-05-06 23:22:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15237 2025-05-07 00:03:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lok3r3qtkse2 2025-05-07 02:21:07+00:00| seen|...

thunderbird: Leak of hashed Window credentials via crafted attachment URL

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is opened, Thunderbird accesses the specified URL to...

CVE-2024-42213

HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to information disclosure...

CVE-2024-42213

CVE-2024-42213 affects HCL BigFix Compliance. The issue is the inclusion of temporary files left in production, which could be exposed via indexing, predictable URLs, or misconfigured permissions, causing information disclosure. CVSSv3.1 base score is 5.3 (Medium); attack vector: network; impact ...

openSUSE Security Advisory (SUSE-SU-2025:1438-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-47229

creationtimestamp| type| source ---|---|--- 2025-05-03 03:19:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14689 2025-05-03 03:26:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loafey3lo7x2 2025-05-03 06:05:36+00:00| seen|...

CVE-2025-4218

creationtimestamp| type| source ---|---|--- 2025-05-02 21:24:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo7r4m7jbne2 2025-05-03 00:01:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo7zvp3erb2h 2025-05-03...

BIT-MOODLE-2024-43432 Moodle: authorization headers preserved between "emulated redirects"

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs...

CVE-2025-3859

Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage This vulnerability affects Focus 138...

CVE-2025-3859 Firefox Focus elide URL allows address bar spoofing

Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage. This vulnerability was fixed in Focus 138...

PT-2025-18298 · Focus · Focus

Name of the Vulnerable Software and Affected Versions: Focus versions prior to 138 Description: Websites could leverage the truncating behavior of long URLs in the location view to potentially trick users into thinking they were on a different webpage. Recommendations: For versions prior to 138,...

CVE-2025-40616 Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy

Reflected Cross-Site Scripting XSS vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the "IDRESERVA" parameter in /bkgimprimircomprobante.php...

CVE-2025-46578

creationtimestamp| type| source ---|---|--- 2025-04-27 02:08:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13596 2025-04-27 03:35:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd32faqr2b 2025-04-27 04:40:04+00:00| seen|...

CVE-2025-27338

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in graphems List Urls list-urls allows Reflected XSS.This issue affects List Urls: from n/a through = 0.2...

CVE-2025-2070

An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user...

PT-2025-17929 · Unknown · Filez Client

Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: An open redirect issue was reported in the FileZ client, potentially leading to information disclosure if a local user visits a crafted URL. Recommendations: At the moment, there is no...

A Gradient-Optimized TSK Fuzzy Framework for Explainable Phishing Detection

Phishing attacks represent an increasingly sophisticated and pervasive threat to individuals and organizations, causing significant financial losses, identity theft, and severe damage to institutional reputations. Existing phishing detection methods often struggle to simultaneously achieve high...

Sensitive Information Disclosure

Weblate is vulnerable to Sensitive Information Disclosure. The vulnerability is due to exposed sensitive data due to source repository URLs containing credentials being included in client-side URL parameters and logs in plaintext...