CVE-2025-15175 SohuTV CacheCloud AppController.java appCommandAnalysis cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/main/java/com/sohu/cache/web/controller/AppController.java. Performing manipulation results in cross site scripting. It is possible to initiate the...

CVE-2025-15174 SohuTV CacheCloud AppManageController.java doAppAuditList cross site scripting

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the function doAppAuditList of the file src/main/java/com/sohu/cache/web/controller/AppManageController.java. Such manipulation leads to cross site scripting. The attack may be performed...

CVE-2025-15174

CVE-2025-15174 affects SohuTV CacheCloud up to 3.2.0, where the cross-site scripting vulnerability stems from the doAppAuditList function in AppManageController.java. The issue allows remote exploitation and has publicly disclosed exploit information per connected sources (including Red Hat, NVD,...

CVE-2025-15174 SohuTV CacheCloud AppManageController.java doAppAuditList cross site scripting

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the function doAppAuditList of the file src/main/java/com/sohu/cache/web/controller/AppManageController.java. Such manipulation leads to cross site scripting. The attack may be performed...

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect operation of the function doAppAuditList in the file...

CVE-2025-15144

creationtimestamp| type| source ---|---|--- 2025-12-28 20:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb373d4wzs2g...

CVE-2025-15151

creationtimestamp| type| source ---|---|--- 2025-12-28 20:35:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb36bqpsnp2c...

CVE-2025-15109

creationtimestamp| type| source ---|---|--- 2025-12-27 21:55:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115793756779838951 2025-12-27 22:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mayu4jubad2g...

CVE-2025-68943

creationtimestamp| type| source ---|---|--- 2025-12-26 04:54:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mauisc3sqs22...

Cloudlog 安全漏洞

Cloudlog is a self-hosted PHP application by the individual developer Peter Goodhall. Allows logging of amateur radio contacts from anywhere. A security vulnerability exists in Cloudlog version 2.6.15 that stems from a blind time-based SQL injection vulnerability in the qsoresults parameter...

The vulnerability of the App Router router on the Next.js software development platform for creating web applications, as well as the CLI interface of the Vercel platform, allows attackers to compromise the integrity of protected information.

The vulnerability of the App Router router on the Next.js software development platform and the Vercel command-line interface CLI platform is related to shortcomings in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...

CVE-2025-15087

A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function submitOrderPayment of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java. Such manipulation of the argument orderSn leads to improper...

CVE-2025-68920

creationtimestamp| type| source ---|---|--- 2025-12-24 22:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3marcovotch2r 2025-12-24 22:34:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mard45ok7h27...

CVE-2019-25240

creationtimestamp| type| source ---|---|--- 2025-12-24 21:02:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar5wtnhaa22 2025-12-24 21:48:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3marajsujz52f...

CVE-2025-8769 MegaSys Computer Technologies Telenium Online Web Application Improper Input Validation

Telenium Online Web Application is vulnerable due to a Perl script that is called to load the login page. Due to improper input validation, an attacker can inject arbitrary Perl code through a crafted HTTP request, leading to remote code execution on the server...

New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper

Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that's delivered by means of a digitally signed, notarized Swift application masquerading as a messaging app installer to bypass Apple's Gatekeeper checks. "Unlike earlier MacSync Stealer variant...

Italy Fines Apple €98.6 Million Over ATT Rules Limiting App Store Competition

Apple has been fined €98.6 million $116 million by Italy's antitrust authority after finding that the company's App Tracking Transparency ATT privacy framework restricted App Store competition. The Italian Competition Authority Autorità Garante della Concorrenza e del Mercato, or AGCM said the...

CVE-2025-14401

PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2025-14401

PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2025-14401 PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability

PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...