2403 matches found
CVE-2025-10204
creationtimestamp| type| source ---|---|--- 2025-09-14 13:52:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lysgtfmiwr2c 2025-09-15 00:01:54+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lytiuzflta2j 2025-11-27 06:57:26+00:00| confirmed|...
CVE-2025-56556
creationtimestamp| type| source ---|---|--- 2025-09-11 22:57:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyltuhsnsw2x...
Exploit for CVE-2025-50110
CVE-2025-50110 Cleartext Transmission of Sensitive Informa...
Phishing Webpage Detection: Unveiling the Threat Landscape and Investigating Detection Techniques
In the realm of cybersecurity, phishing stands as a prevalent cyber attack, where attackers employ various tactics to deceive users into gathering their sensitive information, potentially leading to identity theft or financial gain. Researchers have been actively working on advancing phishing...
CVE-2025-43781
Reflected cross-site scripting XSS vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.12 allows remote attackers to inject arbitrary web script or HTML via the URL in search bar portl...
CVE-2025-59013 Open Redirect in TYPO3 CMS
An open‑redirect vulnerability in GeneralUtility::sanitizeLocalUrl of TYPO3 CMS 9.0.0–9.5.54, 10.0.0–10.4.53, 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 allows an attacker to redirect users to arbitrary external sites, enabling phishing attacks by supplying a manipulated, sanitized URL...
CVE-2025-42933
creationtimestamp| type| source ---|---|--- 2025-09-09 05:36:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyeyroa63k2r 2025-09-09 06:45:43+00:00| seen| https://gist.github.com/Darkcrai86/e4cb495943d18b664199d51dd5059d24 2025-09-09 06:59:44+00:00| seen|...
CVE-2025-57665
Element Plus Link component el-link through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors. The component passes user-controlled href values directly to underlying anchor elements without protocol...
PT-2025-36920
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.3.110 through 7.4.3.128 Liferay DXP versions 2024.Q1.1 through 2024.Q1.12 Liferay DXP versions 2024.Q2.0 through 2024.Q2.13 Liferay DXP versions 2024.Q3.1 through 2024.Q3.8 Description: A reflected cross-site...
CVE-2025-58450
creationtimestamp| type| source ---|---|--- 2025-09-08 23:02:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyecqt3c7p2l 2025-09-09 03:17:32+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3lyeqzdw3ft26 2026-01-24 22:43:54+00:00| seen|...
CVE-2025-56266
A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL...
CVE-2020-36836
creationtimestamp| type| source ---|---|--- 2025-09-06 11:16:35+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-36836.yaml 2025-09-09 21:02:36+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lygmjgrnt32r 2026-04-08...
Wapiti Web Application Vulnerability Scanner 3.2.5
Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the binary release...
CVE-2025-48549
creationtimestamp| type| source ---|---|--- 2025-09-04 21:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly24buk43e2d...
It was found that Lynx doesn't parse the authority component of the URL correctly
...
CVE-2025-56139
LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata image, title, description when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different UR...
CVE-2025-58460
A missing permission check in Jenkins OpenTelemetry Plugin 3.1543.v8446b92bcd64 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...
CVE-2025-9839
creationtimestamp| type| source ---|---|--- 2025-09-03 06:22:00+00:00| seen| https://gist.github.com/Darkcrai86/d331772302066ddfaf3eb355e74d7b1b...
