2403 matches found
The vulnerability of the Views Dashboard component of the Splunk Enterprise platform for operational analysis allows attackers to carry out phishing attacks.
The vulnerability of the Views Dashboard component of the Splunk Enterprise operational analytics platform is related to the redirection of the URL to an unreliable website. Exploiting this vulnerability allows a malicious actor to conduct phishing attacks using a specially created URL address...
CVE-2023-53948
creationtimestamp| type| source ---|---|--- 2025-12-22 00:08:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3majwwkwwjj2f...
CVE-2025-67857
A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...
CVE-2025-68489
creationtimestamp| type| source ---|---|--- 2025-12-19 07:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mad5rqgvir2e...
CVE-2025-67845
A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing path traversal sequences...
CVE-2025-52692
Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials...
EUVD-2025-204429
Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials...
Linksys E9450-SG 安全漏洞
The Linksys E9450-SG is a WiFi router from Linksys USA. A security vulnerability exists in the Linksys E9450-SG that originates from a local network attacker being able to send a specially crafted URL to access certain administrative functions without requiring login credentials...
CVE-2025-14849
creationtimestamp| type| source ---|---|--- 2025-12-18 22:56:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3macbjmj2lk2q...
CVE-2021-47712 Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability
A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation...
CVE-2021-47712 Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability
A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation...
CVE-2025-64461
creationtimestamp| type| source ---|---|--- 2025-12-18 17:23:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabowmh56r2x...
CVE-2025-63391
creationtimestamp| type| source ---|---|--- 2025-12-18 15:31:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741286092781846 2026-01-21 17:31:13+00:00| seen| https://gist.github.com/Cristliu/889471313b3c698fff74d32b7717807c 2026-01-21 17:31:31+00:00| seen|...
CVE-2025-64372
creationtimestamp| type| source ---|---|--- 2025-12-18 09:26:15+00:00| seen| https://gist.github.com/Darkcrai86/32331062537f34f3eb098488b9503800...
CVE-2025-66102
creationtimestamp| type| source ---|---|--- 2025-12-18 09:25:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maau7tlv6y2e...
RLSA-2025:23481 Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand...
python: Improper validation of IPv6 and IPvFuture addresses
A flaw was found in Python. The urllib.parse.urlsplit and urlparse functions improperly validated bracketed hosts , allowing hosts that weren't IPv6 or IPvFuture compliant. This behavior was not conformant to RFC 3986 and was potentially vulnerable to server-side request forgery SSRF if a URL is...
Kentico Xperience 加密问题漏洞
Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a security vulnerability that can be exploited by an attacker to cause URL hashes to be tampered with...
CVE-2025-67787
creationtimestamp| type| source ---|---|--- 2025-12-17 23:03:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7rgtkzc52e 2026-01-02 18:47:13+00:00| seen| Telegram/1Z7rjR8St68LZ1tyLuhvkIaEZBXyoMZCaJmGvEYMoHLo...