CVE-2025-67845

A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing path traversal sequences...

CVE-2025-52692

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials...

EUVD-2025-204429

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials...

Linksys E9450-SG 安全漏洞

The Linksys E9450-SG is a WiFi router from Linksys USA. A security vulnerability exists in the Linksys E9450-SG that originates from a local network attacker being able to send a specially crafted URL to access certain administrative functions without requiring login credentials...

CVE-2025-14849

creationtimestamp| type| source ---|---|--- 2025-12-18 22:56:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3macbjmj2lk2q...

CVE-2021-47712 Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation...

CVE-2021-47712 Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation...

CVE-2025-64461

creationtimestamp| type| source ---|---|--- 2025-12-18 17:23:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabowmh56r2x...

CVE-2025-63391

creationtimestamp| type| source ---|---|--- 2025-12-18 15:31:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741286092781846 2026-01-21 17:31:13+00:00| seen| https://gist.github.com/Cristliu/889471313b3c698fff74d32b7717807c 2026-01-21 17:31:31+00:00| seen|...

CVE-2025-64372

creationtimestamp| type| source ---|---|--- 2025-12-18 09:26:15+00:00| seen| https://gist.github.com/Darkcrai86/32331062537f34f3eb098488b9503800...

CVE-2025-66102

creationtimestamp| type| source ---|---|--- 2025-12-18 09:25:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maau7tlv6y2e...

RLSA-2025:23481 Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand...

python: Improper validation of IPv6 and IPvFuture addresses

A flaw was found in Python. The urllib.parse.urlsplit and urlparse functions improperly validated bracketed hosts , allowing hosts that weren't IPv6 or IPvFuture compliant. This behavior was not conformant to RFC 3986 and was potentially vulnerable to server-side request forgery SSRF if a URL is...

Kentico Xperience 加密问题漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a security vulnerability that can be exploited by an attacker to cause URL hashes to be tampered with...

CVE-2025-67787

creationtimestamp| type| source ---|---|--- 2025-12-17 23:03:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7rgtkzc52e 2026-01-02 18:47:13+00:00| seen| Telegram/1Z7rjR8St68LZ1tyLuhvkIaEZBXyoMZCaJmGvEYMoHLo...

CVE-2025-14713

creationtimestamp| type| source ---|---|--- 2025-12-17 14:10:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ma6tnfqhia2p...

EUVD-2023-60190

Spip 4.1.10 contains a file upload vulnerability that allows attackers to upload malicious SVG files with embedded external links. Attackers can trick administrators into clicking a crafted SVG logo that redirects to a potentially dangerous URL through improper file upload filtering...

The vulnerability of the Virtual Keyboard Video Monitor (vKVM) system used in Cisco Integrated Management Controller (IMC) remote management solutions allows a hacker to redirect users to any desired URL address.

The vulnerability of the Virtual Keyboard Video Monitor vKVM system, a remote administration tool from Cisco’s Integrated Management Controller IMC, involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL addres...

WordPress plugin Directorist 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2023-53882 JLex GuestBook 1.6.4 Reflected Cross-Site Scripting via URL Parameter

JLex GuestBook 1.6.4 contains a reflected cross-site scripting vulnerability in the 'q' URL parameter that allows attackers to inject malicious scripts. Attackers can craft malicious links with XSS payloads to steal session tokens or execute arbitrary JavaScript in victims' browsers...