SolarWinds Observability Self-Hosted 跨站脚本漏洞

SolarWinds Observability Self-Hosted is an observation platform from SolarWinds, Inc. A cross-site scripting vulnerability exists in SolarWinds Observability Self-Hosted, which stems from a cross-site scripting vulnerability in a user-created URL field that could lead to an attack by a...

TOTOLINK A720R Command Injection Vulnerability (CNVD-2025-29710)

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK with dual-band Wi-Fi capabilities, focusing on high-speed internet and signal coverage. The TOTOLINK A720R suffers from a command injection vulnerability that stems from the unvalidated magicid and url parameters in the...

CVE-2024-44660

creationtimestamp| type| source ---|---|--- 2025-11-17 21:30:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5u6b5lmsi2s...

CVE-2025-31649

creationtimestamp| type| source ---|---|--- 2025-11-17 14:30:05+00:00| seen| https://infosec.place/objects/c4fb9493-0d44-4262-9514-bf83eeef89f5 2025-11-18 01:11:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5uklz5skg2q...

CVE-2025-64309

The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques...

EUVD-2025-197664

Brightpick Mission Control discloses device telemetry, configuration, and credential information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques...

CVE-2025-60679

creationtimestamp| type| source ---|---|--- 2025-11-13 19:38:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115544079480228162 2025-11-13 21:05:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5k2yhtll42u...

GHSA-QWVM-X4XH-G2QQ

creationtimestamp| type| source ---|---|--- 2025-11-13 16:05:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115543241220528720...

CVE-2025-63645

creationtimestamp| type| source ---|---|--- 2025-11-13 00:15:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5hv5xrcxe2k...

CVE-2025-40204

creationtimestamp| type| source ---|---|--- 2025-11-13 00:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5hujm7aky2x 2025-12-23 14:37:06+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3manxwzrwls2r 2026-01-06 12:06:54+00:00| seen|...

Siemens SIMATIC S7-1500 Integer Overflow or Wraparound (CVE-2019-5435)

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

PT-2025-46916

Name of the Vulnerable Software and Affected Versions grist-core versions prior to 1.7.7 Description grist-core is a spreadsheet hosting server. A user with access to any document on a Grist installation can use a feature for fetching from a URL that is executed on the server. The privileged...

GHSA-4C3J-3H7V-22Q9 changedetection.io: Stored XSS in Watch update via API

Summary A Stored Cross Site Scripting is present in the changedetection.io Watch update API due to unsufficient security checks. Details Tested on changedetection.io version v0.50.24 console REPOSITORY TAG IMAGE ID CREATED SIZE ghcr.io/dgtlmoon/changedetection.io latest 0367276509a0 23 hours ago...

CVE-2025-13057

creationtimestamp| type| source ---|---|--- 2025-11-12 20:38:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5hj25xv7z2u...

CVE-2025-40170

creationtimestamp| type| source ---|---|--- 2025-11-12 12:26:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gnkjtj452s 2025-11-12 14:01:22+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gsruq7no52 2025-12-03 14:14:49+00:00| seen|...

CVE-2024-32014

creationtimestamp| type| source ---|---|--- 2025-11-12 00:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5feac24fa2s 2025-11-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-12...

CVE-2025-11521

The Astra Security Suite – Firewall & Malware Scan plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient validation of remote URLs for zip downloads and an easily guessable key in all versions up to, and including, 0.2. This makes it possible for unauthenticated attacke...

CVE-2021-4462

creationtimestamp| type| source ---|---|--- 2025-11-11 01:30:37+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cyfupb7gf2 2025-11-11 01:52:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5czngvb7z2k 2025-11-11 03:30:37+00:00| seen|...

CVE-2025-48065

creationtimestamp| type| source ---|---|--- 2025-11-10 21:54:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5cmd4fe4l2k 2025-11-10 22:22:39+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cntcskwo52 2025-11-10 23:25:46+00:00| seen|...

CVE-2025-64688

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it relates to internal functionality that is not available to customers...