CVE-2025-54857

creationtimestamp| type| source ---|---|--- 2025-09-01 06:02:00+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxqwhzos7c2p 2025-09-01 09:36:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxrci7n4zs27 2025-09-01 09:41:43+00:00| seen|...

CVE-2025-9186

creationtimestamp| type| source ---|---|--- 2025-09-01 05:36:46+00:00| seen| https://bsky.app/profile/witch.catra.top/post/3lxqv2uy3es2h 2025-09-02 02:14:47+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lxt2aorgym2c...

PT-2025-35479

Name of the Vulnerable Software and Affected Versions: Akınsoft QR Menü versions s1.05.05 through s1.05.11 Description: This issue is an open redirect vulnerability that allows for forceful browsing and phishing attacks. Recommendations: Update Akınsoft QR Menü to version s1.05.12 or later...

CVE-2025-50974

The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...

CVE-2025-9414

A vulnerability was found in kalcaddle kodbox 1.61. Affected by this vulnerability is an unknown functionality of the file /?explorer/upload/serverDownload of the component Download from Link Handler. Performing manipulation of the argument url results in server-side request forgery. Remote...

CVE-2009-20008

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can...

CVE-2009-20008 Green Dam 3.17 URL Processing Buffer Overflow

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can...

PT-2025-35364

Name of the Vulnerable Software and Affected Versions: Green Dam Youth Escort version 3.17 Description: Green Dam Youth Escort version 3.17 is susceptible to a stack-based buffer overflow when handling excessively long URLs. The issue is located within the URL filtering component, which does not...

CVE-2025-5808

creationtimestamp| type| source ---|---|--- 2025-08-29 15:50:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115112844529462360...

CVE-2025-8147

creationtimestamp| type| source ---|---|--- 2025-08-29 07:19:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxjjgopazf2n...

PT-2025-35227

Name of the Vulnerable Software and Affected Versions: WhatsApp versions prior to v2.25.21.73 for iOS, versions prior to v2.25.21.78 for WhatsApp Business for iOS, and versions prior to v2.25.21.78 for WhatsApp for Mac. Description: WhatsApp was found to have an incomplete authorization flaw in...

Facebook WhatsApp 安全漏洞

Facebook WhatsApp is a suite of mobile applications from Facebook Inc. in the United States that are based on the Android platform and utilize the network to deliver text messages. The application uses contact information in a smartphone to find contacts using the software to send texts, pictures...

PT-2025-35317

Name of the Vulnerable Software and Affected Versions: Basecamp's google sign in gem versions prior to 1.3.1 Description: The gem persists a URL for redirection after authentication. If this URL is set to a protocol-relative URL, it improperly passes the "same origin" check, potentially redirecti...

CVE-2025-57218

creationtimestamp| type| source ---|---|--- 2025-08-28 17:56:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107678659351418...

CVE-2025-58047

CVE-2025-58047 affects Volto (React frontend for Plone). The issue allows an anonymous user to trigger the NodeJS server to exit when visiting a specific URL, potentially causing DoS or downtime. Affected ranges include Volto versions before 16.34.0, 17.x before 17.22.1, 18.x before 18.24.0, and ...

GHSA-XJHF-7833-3PM5 Volto affected by possible DoS by invoking specific URL by anonymous user

Impact When visiting a specific URL, an anonymous user could cause the NodeJS server part of Volto to quit with an error. Patches The problem has been patched and the patch has been backported to Volto major versions down until 16. It is advised to upgrade to the latest patch release of your...

CVE-2025-9505

creationtimestamp| type| source ---|---|--- 2025-08-27 06:35:29+00:00| seen| https://gist.github.com/Darkcrai86/d0598bb99bb282e6e6ff9d466cd4f315...

Linux Distros Unpatched Vulnerability : CVE-2020-25789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Tiny Tiny RSS aka tt-rss before 2020-09-16. The cachedurl feature mishandles JavaScript inside an SVG document. CVE-2020-25789 Note...

Basecamp 输入验证错误漏洞

Basecamp is a project management software from Basecamp, Inc. An input validation error vulnerability exists in Basecamp versions prior to 1.3.0 that stems from improper URL validation and could lead to redirection attacks...

Linux Distros Unpatched Vulnerability : CVE-2020-12474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public UR...