TencentOS Server 4: perl-App-cpanminus (TSSA-2025:0373)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0373 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2025-65022

creationtimestamp| type| source ---|---|--- 2025-11-19 17:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yqz7qgc42n...

Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices

Cybersecurity researchers have disclosed details of a new campaign that leverages a combination of social engineering and WhatsApp hijacking to distribute a Delphi-based banking trojan named Eternidade Stealer as part of attacks targeting users in Brazil. "It uses Internet Message Access Protocol...

CVE-2025-65103

creationtimestamp| type| source ---|---|--- 2025-11-19 13:42:10+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-2jm2-2p35-rp3j 2025-11-19 21:10:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5z6343nhz2u...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Allocation of Resources Without Limits or Throttling due to Bouncy Castle(CVE-2025-8916 & CVE-2025-8885)

Summary IBM App Connect Enterprise runtime and IBM Integration Bus for z/OS are vulnerable to Allocation of Resources Without Limits or Throttling due to Bouncy Castle. Vulnerability Details CVEID:CVE-2025-8916 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in...

CVE-2025-13051

creationtimestamp| type| source ---|---|--- 2025-11-19 04:33:19+00:00| seen| https://infosec.exchange/users/offseq/statuses/115574492192253606 2025-11-19 04:59:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5xht5ajjf2n 2025-11-20 05:55:19+00:00| seen|...

CVE-2025-12792

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...

Shopside App 安全漏洞

Shopside App is a shopping application by Shopside Turkey. A security vulnerability exists in Shopside App 05022025 and earlier versions, which stems from improper restriction of the rendering UI layer or frame, which may result in an iFrame override...

CVE-2025-13415: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely...

CVE-2025-58034

creationtimestamp| type| source ---|---|--- 2025-11-18 20:20:20+00:00| seen| https://infosec.exchange/users/mttaggart/statuses/115572553780813909 2025-11-18 20:20:37+00:00| seen| https://bsky.app/profile/taggart-tech.com/post/3m5wkt6hi722g 2025-11-18 20:22:18+00:00| seen|...

CVE-2025-63883

A DOM-based cross-site scripting vulnerability exists in electic-shop v1.0 Bhabishya-123/E-commerce. The site's client-side JavaScript reads attacker-controlled input for example, values derived from the URL or page fragment and inserts it into the DOM via unsafe sinks...

CVE-2025-40548

creationtimestamp| type| source ---|---|--- 2025-11-18 09:36:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vgtwdyah2s 2025-11-18 10:30:25+00:00| seen| https://gist.github.com/Darkcrai86/f8b694b83d221eed2fd78658dde8f750 2025-11-23 01:27:47+00:00| seen|...

CVE-2025-9625

creationtimestamp| type| source ---|---|--- 2025-11-18 09:23:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vg4xyvpc2a...

CVE-2025-8693

creationtimestamp| type| source ---|---|--- 2025-11-18 04:33:06+00:00| seen| https://infosec.exchange/users/offseq/statuses/115568829011134844 2025-11-18 05:38:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5uzkcx5wt2k...

CVE-2025-12792

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...

CVE-2025-12792

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...

CVE-2025-12792

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...

EUVD-2025-197904

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...

CVE-2025-12792

CVE-2025-12792 describes a vulnerability in the Mac App Store distribution of the Canva for Mac desktop app prior to 1.117.1. The issue stems from the app being built without Hardened Runtime, enabling a local threat actor with unprivileged access to execute arbitrary code that inherits the app’s...

CVE-2025-55796

The openml/openml.org web application (version v2.0.20241110 ) is vulnerable to account takeover due to the use of predictable MD5-based tokens for critical workflows, including signup confirmation, password resets, and email changes. The root cause is that these tokens are generated by hashing a...