CVE-2025-68489

creationtimestamp| type| source ---|---|--- 2025-12-19 07:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mad5rqgvir2e...

CVE-2025-67845

A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing path traversal sequences...

CVE-2025-52692

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials...

EUVD-2025-204429

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials...

Browser Company ArcSearch 安全漏洞

Browser Company ArcSearch is a mobile browser from Browser Company, Inc. A security vulnerability exists in Browser Company ArcSearch versions prior to 1.12.6 that originates from address bar spoofing and could lead to misleading user interaction...

PT-2025-52488

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

Linksys E9450-SG 安全漏洞

The Linksys E9450-SG is a WiFi router from Linksys USA. A security vulnerability exists in the Linksys E9450-SG that originates from a local network attacker being able to send a specially crafted URL to access certain administrative functions without requiring login credentials...

Siemens LOGO! 8 BM Devices Buffer Copy Without Checking Size of Input (CVE-2025-40815)

A vulnerability has been identified in - LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions - LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions - LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions - LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions - LOGO! 24CE 6ED1052-1CC08-0BA2 All versions - LOGO! 24CEo...

Browser Company ArcSearch 安全漏洞

Browser Company ArcSearch is a mobile browser from the US-based Browser Company. A security vulnerability exists in Browser Company ArcSearch versions prior to 1.45.2 that stems from iframe-triggered URI navigation leading to address bar spoofing, which may increase the risk of spoofing...

CVE-2019-25229

creationtimestamp| type| source ---|---|--- 2025-12-18 22:59:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3macbo3vbb72x...

CVE-2025-14849

creationtimestamp| type| source ---|---|--- 2025-12-18 22:56:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3macbjmj2lk2q...

CVE-2021-47712

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation...

CVE-2021-47712 Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation...

CVE-2021-47712 Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the parseFAR function when processing a PFCP Session Establishment Request containing a CreateFAR with an empty or truncated IPv4 address field. An attacker can cause the service to crash and disrupt user-plane...

CVE-2025-65568

A denial-of-service vulnerability exists in the omec-project UPF pfcpiface component in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a PFCP Session Establishment Request that includes a CreateFAR with an empty or truncated IPv4 address field is not properly validated. During...

CVE-2025-64461

creationtimestamp| type| source ---|---|--- 2025-12-18 17:23:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabowmh56r2x...

CVE-2025-63391

creationtimestamp| type| source ---|---|--- 2025-12-18 15:31:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741286092781846 2026-01-21 17:31:13+00:00| seen| https://gist.github.com/Cristliu/889471313b3c698fff74d32b7717807c 2026-01-21 17:31:31+00:00| seen|...

GHSA-46J5-6FG5-4GV3 Duplicate Advisory: Nodemailer is vulnerable to DoS through Uncontrolled Recursion

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rcmh-qjqh-p98v. This link is maintained to preserve external references. Original Description A flaw was found in Nodemailer. This vulnerability allows a denial of service DoS via a crafted email address header...

Duplicate Advisory: Nodemailer is vulnerable to DoS through Uncontrolled Recursion

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rcmh-qjqh-p98v. This link is maintained to preserve external references. Original Description A flaw was found in Nodemailer. This vulnerability allows a denial of service DoS via a crafted email address header...