1488 matches found
GHSA-HM5P-X4RQ-38W4
creationtimestamp| type| source ---|---|--- 2025-12-23 23:11:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771407249317251 2026-01-07 20:04:13+00:00| published-proof-of-concept| Telegram/shQsG5TFmMrzus3uWOqA-vjUO4oHdrJHZ6Xu7ifps-tm5s...
EUVD-2025-204449
Not used...
EUVD-2025-203435
An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...
EUVD-2025-203178
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
GHSA-GVMQ-HR29-XRX3 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-8405 Improper Encoding or Escaping of Output in GitLab
GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability...
CVE-2025-65849
creationtimestamp| type| source ---|---|--- 2025-12-08 23:14:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7j5unbzxn2k...
GHSA-97GM-QXRM-C6W2 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
GHSA-WMFR-VXM2-PX6Q vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
EUVD-2025-199540
Not used...
CVE-2016-5284
creationtimestamp| type| source ---|---|--- 2025-11-22 19:26:52+00:00| seen| https://bsky.app/profile/ethdevnews.bsky.social/post/3m6ajor6mek2c 2025-11-22 19:35:31+00:00| seen| https://bsky.app/profile/ethdevnews.bsky.social/post/3m6ak6acdfc2c 2025-11-22 21:31:51+00:00| seen|...
GHSA-W337-WPHV-G4VH vulnerabilities
Vulnerabilities for packages: binutils...
EUVD-2025-99092
Substance3D - Stager versions 3.1.5 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-62482
creationtimestamp| type| source ---|---|--- 2025-11-11 11:28:54+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3m5dztyqpqt26 2025-11-13 15:37:40+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5jimis25oy2...
EUVD-2025-37588
The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the geojsonmarker shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for...
GHSA-MM7P-FCC7-PG87 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu...
GHSA-M42M-M8CR-8M58 vulnerabilities
Vulnerabilities for packages: open-webui, py3-langchain-text-splitters...
EUVD-2025-33240
Memory corruption while performing SCM call with malformed inputs...
EUVD-2011-4303
Malware in sbrugna...
EUVD-2016-7533
Malware in sbrugna...