Cisco Webex Meetings 输入验证错误漏洞

Cisco Webex Meetings is a video conferencing solution from Cisco USA. An input validation error vulnerability exists in Cisco Webex Meetings that stems from insufficient validation of URLs, which could result in redirects to untrusted websites...

SAMSUNG Account 安全漏洞

SAMSUNG Account is an account management software from Samsung South Korea. A security vulnerability exists in SAMSUNG Account versions prior to 14.1.0.0 that stems from improper URL input validation, which could allow a remote attacker to obtain sensitive information...

CVE-2025-8299

creationtimestamp| type| source ---|---|--- 2025-09-02 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-882/ 2025-09-02 23:31:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvbldulbz2z...

CVE-2025-54857

creationtimestamp| type| source ---|---|--- 2025-09-01 06:02:00+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxqwhzos7c2p 2025-09-01 09:36:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxrci7n4zs27 2025-09-01 09:41:43+00:00| seen|...

CVE-2025-9186

creationtimestamp| type| source ---|---|--- 2025-09-01 05:36:46+00:00| seen| https://bsky.app/profile/witch.catra.top/post/3lxqv2uy3es2h 2025-09-02 02:14:47+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lxt2aorgym2c...

PT-2025-35479

Name of the Vulnerable Software and Affected Versions: Akınsoft QR Menü versions s1.05.05 through s1.05.11 Description: This issue is an open redirect vulnerability that allows for forceful browsing and phishing attacks. Recommendations: Update Akınsoft QR Menü to version s1.05.12 or later...

CVE-2025-50974

The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...

CVE-2025-9414

A vulnerability was found in kalcaddle kodbox 1.61. Affected by this vulnerability is an unknown functionality of the file /?explorer/upload/serverDownload of the component Download from Link Handler. Performing manipulation of the argument url results in server-side request forgery. Remote...

CVE-2009-20008

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can...

CVE-2009-20008 Green Dam 3.17 URL Processing Buffer Overflow

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can...

PT-2025-35364

Name of the Vulnerable Software and Affected Versions Green Dam Youth Escort version 3.17 Description Green Dam Youth Escort version 3.17 is susceptible to a stack-based buffer overflow when handling excessively long URLs. The issue is located within the URL filtering component, which does not...

CVE-2025-5808

creationtimestamp| type| source ---|---|--- 2025-08-29 15:50:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115112844529462360...

CVE-2025-8147

creationtimestamp| type| source ---|---|--- 2025-08-29 07:19:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxjjgopazf2n...

PT-2025-35317

Name of the Vulnerable Software and Affected Versions: Basecamp's google sign in gem versions prior to 1.3.1 Description: The gem persists a URL for redirection after authentication. If this URL is set to a protocol-relative URL, it improperly passes the "same origin" check, potentially redirecti...

The vulnerability of Mozilla Firefox browsers, related to the use of open redirection, allows attackers to redirect users to any desired URL address.

The vulnerability of Mozilla Firefox browsers is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address remotely...

Facebook WhatsApp 安全漏洞

Facebook WhatsApp is a suite of mobile applications from Facebook Inc. in the United States that are based on the Android platform and utilize the network to deliver text messages. The application uses contact information in a smartphone to find contacts using the software to send texts, pictures...

PT-2025-35227

Name of the Vulnerable Software and Affected Versions: WhatsApp versions prior to v2.25.21.73 for iOS, versions prior to v2.25.21.78 for WhatsApp Business for iOS, and versions prior to v2.25.21.78 for WhatsApp for Mac. Description: WhatsApp was found to have an incomplete authorization flaw in...

CVE-2025-57218

creationtimestamp| type| source ---|---|--- 2025-08-28 17:56:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107678659351418...

CVE-2025-58047

CVE-2025-58047 affects Volto (React frontend for Plone). The issue allows an anonymous user to trigger the NodeJS server to exit when visiting a specific URL, potentially causing DoS or downtime. Affected ranges include Volto versions before 16.34.0, 17.x before 17.22.1, 18.x before 18.24.0, and ...

GHSA-XJHF-7833-3PM5 Volto affected by possible DoS by invoking specific URL by anonymous user

Impact When visiting a specific URL, an anonymous user could cause the NodeJS server part of Volto to quit with an error. Patches The problem has been patched and the patch has been backported to Volto major versions down until 16. It is advised to upgrade to the latest patch release of your...