EUVD-2025-7028

Malicious code in bioql PyPI...

CVE-2025-10136

CVE-2025-10136 concerns the WordPress plugin TweetThis Shortcode. The TweetThis Shortcode plugin is vulnerable to Stored Cross-Site Scripting via its tweetthis shortcode in all versions up to and including 1.8.0 due to insufficient input sanitization and output escaping on user-supplied attribute...

CVE-2025-43371

This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its sandbox...

ZhenShi Mibro Fit App 安全漏洞

ZhenShi Mibro Fit App is a smartwatch companion app from China-based ZhenShi. A security vulnerability exists in ZhenShi Mibro Fit App version 1.6.3.17499, which originates from an improperly exported AndroidManifest.xml component and could lead to a local attack...

CVE-2025-50862

CVE-2025-50862 affects the Lotus Cars Android app (com.lotus.carsdomestic.intl) v1.2.8. The underlying issue is allowBackup=true in the app manifest, which enables data exfiltration via ADB backup on rooted or debug-enabled devices. Impact per sources indicates potential user data exposure due to...

CVE-2023-41532

creationtimestamp| type| source ---|---|--- 2025-08-07 22:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvtqmb4lw42p 2025-11-13 19:19:20+00:00| seen| https://gist.github.com/celbahraoui-chaima/209029209e83fd0f85e06f0b4ef4f7ef...

CVE-2025-43245

creationtimestamp| type| source ---|---|--- 2025-07-30 21:42:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7lmzfbws2s...

CVE-2025-36106 IBM Cognos Analytics Mobile (iOS) information disclosure

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...

CVE-2025-53891

creationtimestamp| type| source ---|---|--- 2025-07-15 06:33:43+00:00| seen| https://bsky.app/profile/potato.software/post/3ltybumgogk26...

CVE-2025-53672

creationtimestamp| type| source ---|---|--- 2025-07-09 18:11:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltkg3ndlta27...

CVE-2025-28969

creationtimestamp| type| source ---|---|--- 2025-07-04 10:10:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4yu2q4bi2i 2025-08-06 13:54:19+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:21+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448...

CVE-2024-46992 Electron ASAR Integrity bypass by just modifying the content

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 30.0.0-alpha.1 to before 30.0.5 and 31.0.0-alpha.1 to before 31.0.0-beta.1, Electron is vulnerable to an ASAR Integrity bypass. This only impacts apps that have the...

CVE-2025-6912

creationtimestamp| type| source ---|---|--- 2025-06-30 17:31:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstpn6zajz2s...

CVE-2025-6855

creationtimestamp| type| source ---|---|--- 2025-06-29 09:55:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19859 2025-06-29 13:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsqpysfxo62o 2025-07-02 21:07:33+00:00| published-proof-of-concept|...

CVE-2025-53094

creationtimestamp| type| source ---|---|--- 2025-06-27 20:25:01+00:00| seen| https://bsky.app/profile/potato.software/post/3lsmhwirigj2p 2025-06-27 20:39:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmiqcpzd325 2025-06-27 20:52:27+00:00| published-proof-of-concept|...

CVE-2025-52810

creationtimestamp| type| source ---|---|--- 2025-06-27 14:37:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsluith26t2a...

CVE-2025-52902

creationtimestamp| type| source ---|---|--- 2025-06-26 11:15:58+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-4wx8-5gm2-2j97 2025-06-26 14:51:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19609 2025-06-26...

PT-2025-27002 · Github · Octo-Sts

Name of the Vulnerable Software and Affected Versions: Octo-STS versions prior to v0.5.3 Description: Octo-STS is a GitHub App that acts like a Security Token Service STS for the GitHub API. The issue allows for unauthenticated Server-Side Request Forgery SSRF by abusing fields in OpenID Connect...

CVE-2025-3473

creationtimestamp| type| source ---|---|--- 2025-06-11 17:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdxl7x27i2p 2025-06-14 04:33:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18350...

CVE-2025-5707

creationtimestamp| type| source ---|---|--- 2025-06-06 01:30:27+00:00| published-proof-of-concept| Telegram/Ky7-fAwyzxgpEw1yj-LKv6RLUuZgzm3K9CGTukUJcYN--I 2025-06-06 05:29:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw445j4rn2k...