CVE-2025-63889

creationtimestamp| type| source ---|---|--- 2025-11-20 19:49:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m63jziszqn2q...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to loss of confidentiality [CVE-2025-1993]

Summary IBM App Connect Enterprise Certified Container DesignerAuthoring instances store their flows in a database that is protected by weaker than expected cryptographic algorithms that could be decrypted by a local user. This bulletin provides patch information to address the vulnerability in I...

CVE-2025-12778

creationtimestamp| type| source ---|---|--- 2025-11-20 08:04:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m62cndqlmn2q...

CVE-2025-13424

creationtimestamp| type| source ---|---|--- 2025-11-20 04:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5zxcbyj6x2w...

CVE-2025-13422

creationtimestamp| type| source ---|---|--- 2025-11-20 00:17:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5zij6gvgk2k...

KLA90450 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Application Gateway can be exploited remotely to gain privileges. 2. An elevatio...

TencentOS Server 4: perl-App-cpanminus (TSSA-2025:0373)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0373 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2025-65022

creationtimestamp| type| source ---|---|--- 2025-11-19 17:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yqz7qgc42n...

Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices

Cybersecurity researchers have disclosed details of a new campaign that leverages a combination of social engineering and WhatsApp hijacking to distribute a Delphi-based banking trojan named Eternidade Stealer as part of attacks targeting users in Brazil. "It uses Internet Message Access Protocol...

CVE-2025-65103

creationtimestamp| type| source ---|---|--- 2025-11-19 13:42:10+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-2jm2-2p35-rp3j 2025-11-19 21:10:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5z6343nhz2u...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Allocation of Resources Without Limits or Throttling due to Bouncy Castle(CVE-2025-8916 & CVE-2025-8885)

Summary IBM App Connect Enterprise runtime and IBM Integration Bus for z/OS are vulnerable to Allocation of Resources Without Limits or Throttling due to Bouncy Castle. Vulnerability Details CVEID:CVE-2025-8916 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in...

CVE-2025-13051

creationtimestamp| type| source ---|---|--- 2025-11-19 04:33:19+00:00| seen| https://infosec.exchange/users/offseq/statuses/115574492192253606 2025-11-19 04:59:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5xht5ajjf2n 2025-11-20 05:55:19+00:00| seen|...

CVE-2025-12792

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...

Shopside App 安全漏洞

Shopside App is a shopping application by Shopside Turkey. A security vulnerability exists in Shopside App 05022025 and earlier versions, which stems from improper restriction of the rendering UI layer or frame, which may result in an iFrame override...

CVE-2025-58034

creationtimestamp| type| source ---|---|--- 2025-11-18 20:20:20+00:00| seen| https://infosec.exchange/users/mttaggart/statuses/115572553780813909 2025-11-18 20:20:37+00:00| seen| https://bsky.app/profile/taggart-tech.com/post/3m5wkt6hi722g 2025-11-18 20:22:18+00:00| seen|...

CVE-2025-63883

A DOM-based cross-site scripting vulnerability exists in electic-shop v1.0 Bhabishya-123/E-commerce. The site's client-side JavaScript reads attacker-controlled input for example, values derived from the URL or page fragment and inserts it into the DOM via unsafe sinks...

CVE-2025-40548

creationtimestamp| type| source ---|---|--- 2025-11-18 09:36:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vgtwdyah2s 2025-11-18 10:30:25+00:00| seen| https://gist.github.com/Darkcrai86/f8b694b83d221eed2fd78658dde8f750 2025-11-23 01:27:47+00:00| seen|...

CVE-2025-9625

creationtimestamp| type| source ---|---|--- 2025-11-18 09:23:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vg4xyvpc2a...

CVE-2025-8693

creationtimestamp| type| source ---|---|--- 2025-11-18 04:33:06+00:00| seen| https://infosec.exchange/users/offseq/statuses/115568829011134844 2025-11-18 05:38:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5uzkcx5wt2k...

CVE-2025-12792

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...