37429 matches found
CVE-2025-12596
creationtimestamp| type| source ---|---|--- 2025-11-02 11:42:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ngfuf4yn2k 2025-11-02 19:22:19+00:00| seen| https://sploitus.com/exploit?id=0743D3EC-B709-5A4C-B8C3-F40F793348C3 2025-11-02 23:00:11+00:00| published-proof-of-concept|...
CVE-2025-12599
creationtimestamp| type| source ---|---|--- 2025-11-01 21:27:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4lwnko5my2q 2025-11-02 03:01:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4mjclaznx2t...
CVE-2025-63561
creationtimestamp| type| source ---|---|--- 2025-10-31 22:22:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jjabsxux2q...
CVE-2025-63458
creationtimestamp| type| source ---|---|--- 2025-10-31 20:42:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115470719686843436 2025-10-31 21:34:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jgkh3jcw2j 2026-09-09 05:00:13+00:00| seen|...
CVE-2025-12507
creationtimestamp| type| source ---|---|--- 2025-10-31 17:45:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4izqoajhs2x...
Chromium: CVE-2025-12439 Inappropriate implementation in App-Bound Encryption
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.17 LTS and 12.17.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...
Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to loss of confidentiality [CVE-2025-59343]
Summary Node.js module tar-fs is used by IBM App Connect Enterprise Certified Container for processing tar files and streams. IBM App Connect Enterprise Certified Container operands are vulnerable to loss of confidentiality. This bulletin provides patch information to address the reported...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring, IntegrationRuntime and IntegrationServer operands that use email nodes are vulnerable to loss of confidentiality [GHSA-mm7p-fcc7-pg87]
Summary Node.js module nodemailer is used by IBM App Connect Enterprise Certified Container for processing email in Designer flows that contain an email Node. IBM App Connect Enterprise Certified Container DesignerAuthoring, IntegrationRuntime and IntegrationServer operands that run flows...
CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange Servers
The U.S. Cybersecurity and Infrastructure Security Agency CISA and National Security Agency NSA, along with international partners from Australia and Canada, have released guidance to harden on-premise Microsoft Exchange Server instances from potential exploitation. "By restricting administrative...
Malicious code in dx_auth2_app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba4fd977bb9fcc546d31e9a9f84a5339660ae4f841ad226499d9d1e60de893e The package dxauth2app was found to contain malicious code...
SUSE CVE-2025-12439
Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...
CVE-2025-34284
creationtimestamp| type| source ---|---|--- 2025-10-31 00:18:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4h7be7zn72s 2025-10-31 04:31:53+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4hng5xndu27...
CVE-2025-61113
TalkTalk 3.3.6 Android App contains improper access control vulnerabilities in multiple API endpoints. By modifying request parameters, attackers may obtain sensitive user information such as device identifiers and birthdays and access private group information, including join credentials...
CVE-2025-61115
ABC Fine Wine & Spirits Android App version v.11.27.5 and before package name com.cta.abcfinewineandspirits, developed by ABC Liquors, Inc., contains an improper access control vulnerability in its login mechanism. The application does not properly validate user passwords during authentication,...
CVE-2025-61121
Mobile Scanner Android App version 2.12.38 package name com.glority.everlens, developed by Glority Global Group Ltd., contains a credential leakage vulnerability. Improper handling of cloud service credentials may allow attackers to obtain them and carry out unauthorized actions, such as sensitiv...
CVE-2025-61116
AdForest - Classified Android App version 4.0.12 package name scriptsbundle.adforest, developed by Muhammad Jawad Arshad, contains an improper access control vulnerability in its authentication mechanism. The app uses a Base64-encoded email address as the authorization credential, which can be...
CVE-2025-61117
Senza: Keto & Fasting Android App version 2.10.15 package name com.gl.senza, developed by Paul Itoi, contains an improper access control vulnerability. By exploiting insufficient checks in user data API endpoints, attackers can obtain authentication tokens and perform account takeover. Successful...
Open-Xchange OX App Suite 安全漏洞
Open-Xchange OX App Suite is a productivity application suite from Open-Xchange Germany. A security vulnerability exists in the Open-Xchange GmbH OX App Suite that stems from a malicious or unintentional API request that could cause a large amount of data to be added to the cache, thereby evictin...
Open-Xchange OX App Suite 安全漏洞
Open-Xchange OX App Suite is a productivity application suite from Open-Xchange Germany. A security vulnerability exists in Open-Xchange OX App Suite that stems from malicious email content that can be used to perform redirection attacks, potentially causing users to perform unintended actions or...