2403 matches found
CVE-2025-60358
creationtimestamp| type| source ---|---|--- 2025-10-27 22:15:23+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m47gy6peop2e 2025-10-27 22:15:47+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3m47gybr2des2 2025-10-28 11:16:05+00:00| seen|...
EUVD-2025-36367
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions 6.2.1 and earlier are vulnerable to reflected cross-site scripting XSS via a malformed URL path. The 404 error page includes t...
CLSA-2025-1761576180 Fix CVE(s): CVE-2025-31651
SECURITY UPDATE: Bypassing of some rewrite rules by a specially crafted request - debian/patches/CVE-2025-31651.patch: better handling of URLs - CVE-2025-31651...
CVE-2025-12252
creationtimestamp| type| source ---|---|--- 2025-10-27 11:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m46cdhy2sz2c...
ChatGPT Atlas Browser Can Be Tricked by Fake URLs into Executing Hidden Commands
The newly released OpenAI ChatGPT Atlas web browser has been found to be susceptible to a prompt injection attack where its omnibox can be jailbroken by disguising a malicious prompt as a seemingly harmless URL to visit. "The omnibox combined address/search bar interprets input either as a URL to...
EUVD-2025-35904
The Watu Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTTP Referer header in versions less than, or equal to, 3.4.4 due to insufficient input sanitization and output escaping when the "Save source URL" option is enabled. This makes it possible for unauthenticated...
WSO2 API Manager 安全漏洞
WSO2 API Manager is a suite of API lifecycle management solutions from US-based WSO2. A security vulnerability exists in WSO2 API Manager that stems from the Try-It feature not properly validating user-supplied URLs, which could lead to server-side request forgery and reflective cross-site...
CVE-2025-36361
creationtimestamp| type| source ---|---|--- 2025-10-24 13:06:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3wwvcpmv72f...
EUVD-2025-35803
The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate paths passed to function/s, allowing any admins to perform LFI attacks...
PT-2025-43612
Name of the Vulnerable Software and Affected Versions Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress versions prior to 2.1.5 Description The software contains a Server-Side Request Forgery issue resulting from inadequate...
CVE-2025-62617
creationtimestamp| type| source ---|---|--- 2025-10-22 09:59:51+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-2v5m-cq9w-fc33 2025-10-23 00:46:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3t53ouyh52o...
CVE-2025-62683
creationtimestamp| type| source ---|---|--- 2025-10-21 04:51:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ojtejrn22o...
Ivanti Secure Access Client Open Redirect Vulnerability
Ivanti Secure Access Client is a security software client developed by Ivanti, Inc. to enable remote secure access, supporting enterprise-class VPN connections and encrypted access to resources. Ivanti Secure Access Client suffers from an open redirection vulnerability that originates from an...
CVE-2025-10363
creationtimestamp| type| source ---|---|--- 2025-10-20 07:09:16+00:00| seen| https://bsky.app/profile/infoguard-ag.bsky.social/post/3m3mb3cow722y 2025-11-01 16:18:17+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3m4lfe7sv5n2l 2025-11-01 16:47:29+00:00| seen|...
CVE-2025-11938
ChurchCRM up to version 5.18.0 is affected by a deserialization vulnerability in the file setup/routes/setup.php. The issue arises when user-controlled values for DB_PASSWORD, ROOT_PATH, or URL are deserialized, enabling remote exploitation. Multiple connected reports consolidate this as a remote...
GHSA-5RRX-JJJQ-Q2R5
creationtimestamp| type| source ---|---|--- 2025-10-15 11:35:09+00:00| seen| https://bsky.app/profile/appsecfeed.bsky.social/post/3m3a5mcs3go2d 2025-10-24 11:40:04+00:00| seen| https://gist.github.com/dhmosfunk/0b74940802f1c0e6b4e39101b301072c...
PT-2025-42346
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A validation vulnerability exists in an undisclosed URL within the Configuration utility. The vulnerability concerns an input validation issue. Recommendations ...
Cisco IOS Software Industrial Ethernet Switch Device Manager DoS (cisco-sa-ios-invalid-url-dos-Nvxszf6u)
This vulnerability occurs due to improper input validation in the deviceâs HTTP request handling. An attacker could exploit it by sending a specially crafted URL to the web interface, causing the device to crash and reload. Successful exploitation results in a denial-of-service DoS condition,...
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 Corporation. A security vulnerability exists in F5 BIG-IP, which originates from a bd process that may repeatedly terminate when th...