2313 matches found
CVE-2025-62683
creationtimestamp| type| source ---|---|--- 2025-10-21 04:51:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ojtejrn22o...
Ivanti Secure Access Client Open Redirect Vulnerability
Ivanti Secure Access Client is a security software client developed by Ivanti, Inc. to enable remote secure access, supporting enterprise-class VPN connections and encrypted access to resources. Ivanti Secure Access Client suffers from an open redirection vulnerability that originates from an...
CVE-2025-10363
creationtimestamp| type| source ---|---|--- 2025-10-20 07:09:16+00:00| seen| https://bsky.app/profile/infoguard-ag.bsky.social/post/3m3mb3cow722y 2025-11-01 16:18:17+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3m4lfe7sv5n2l 2025-11-01 16:47:29+00:00| seen|...
CVE-2025-11938
ChurchCRM up to version 5.18.0 is affected by a deserialization vulnerability in the file setup/routes/setup.php. The issue arises when user-controlled values for DB_PASSWORD, ROOT_PATH, or URL are deserialized, enabling remote exploitation. Multiple connected reports consolidate this as a remote...
GHSA-5RRX-JJJQ-Q2R5
creationtimestamp| type| source ---|---|--- 2025-10-15 11:35:09+00:00| seen| https://bsky.app/profile/appsecfeed.bsky.social/post/3m3a5mcs3go2d 2025-10-24 11:40:04+00:00| seen| https://gist.github.com/dhmosfunk/0b74940802f1c0e6b4e39101b301072c...
PT-2025-42346
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A validation vulnerability exists in an undisclosed URL within the Configuration utility. The vulnerability concerns an input validation issue. Recommendations ...
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 Corporation. A security vulnerability exists in F5 BIG-IP, which originates from a bd process that may repeatedly terminate when th...
Cisco IOS Software Industrial Ethernet Switch Device Manager DoS (cisco-sa-ios-invalid-url-dos-Nvxszf6u)
This vulnerability occurs due to improper input validation in the deviceâs HTTP request handling. An attacker could exploit it by sending a specially crafted URL to the web interface, causing the device to crash and reload. Successful exploitation results in a denial-of-service DoS condition,...
GHSA-QGJ3-F9GJ-98V9
creationtimestamp| type| source ---|---|--- 2025-10-14 19:47:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115374244887228575...
CVE-2025-59295 Windows URL Parsing Remote Code Execution Vulnerability
...
AndSoft e-TMS Cross-Site Scripting Vulnerability (CNVD-2025-23568)
AndSoft e-TMS is a logistics management software from AndSoft Spain. A cross-site scripting vulnerability exists in AndSoft e-TMS, which originates from a lack of effective filtering and escaping of user-supplied data in parameter l of the /clt/TRACKREQUEST.ASP file, which can be exploited by an...
PT-2025-41801
Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions through 5.13.0 Description The Mattermost Desktop App does not properly validate URLs originating from outside the configured Mattermost servers. This allows a malicious server to cause the application to crash ...
CVE-2025-59271
creationtimestamp| type| source ---|---|--- 2025-10-09 21:38:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115346367137866366 2025-10-10 06:21:39+00:00| seen| https://gist.github.com/Darkcrai86/a1d6b4aaa6ecda458d2612b1abdd6244 2025-10-14 16:13:41+00:00| seen|...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can gain unauthorized access to restricted organization or application editing interfaces by manipulating URLs after authentication. Remediation Upgrade github.com/casdoor/casdoor/authz to version...
CVE-2025-60313
Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting XSS in the Enter URLs to check input field. This allows a remote attacker to execute arbitrary code...
SourceCodester Link Status Checker 安全漏洞
SourceCodester Link Status Checker is an open source link status checker from SourceCodester. A security vulnerability exists in SourceCodester Link Status Checker version 1.0, which stems from the Enter URLs to check input field being vulnerable to a cross-site scripting attack that could lead t...
PT-2025-41302
Name of the Vulnerable Software and Affected Versions Casdoor versions prior to 2.26.0 Description A flaw exists in the permission verification module and organization/application editing interface. This allows remotely authenticated administrators of any organization to circumvent the system's...
EUVD-2025-33286
An issue in the permission verification module and organization/application editing interface in Casdoor before 2.26.0 allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly concatenating URLs after log...
GHSA-RJ3R-R7HH-JXFQ pdfmake is vulnerable to Throttling via repeatedly redirecting URL in file embedding
Versions of the package pdfmake from 0.3.0-beta.1 to before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...