31756 matches found
CVE-2025-8597 Privilege Escalation via get-task-allow entitlement in MacVim.app
MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context despite...
CVE-2025-9431
creationtimestamp| type| source ---|---|--- 2025-08-26 04:49:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbpmfrhrk2z...
CVE-2025-9426
creationtimestamp| type| source ---|---|--- 2025-08-26 02:59:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbjhdlccz2v...
CVE-2025-9429
creationtimestamp| type| source ---|---|--- 2025-08-26 02:43:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbimide7d2w...
CVE-2025-57809
creationtimestamp| type| source ---|---|--- 2025-08-26 01:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbdwdwh7o2q...
Linux Distros Unpatched Vulnerability : CVE-2021-44775
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitra...
CVE-2025-53510
creationtimestamp| type| source ---|---|--- 2025-08-25 18:30:09+00:00| seen| https://infosec.place/objects/c58484ca-95bb-4239-b16d-14f323a411d2 2025-08-26 00:43:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbbvctaom2k...
CVE-2025-54487
creationtimestamp| type| source ---|---|--- 2025-08-25 16:47:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxahcliage22 2025-08-26 06:00:33+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...
Introducing the Qualys App Picker: Easier, Faster Navigation for All Your Security Applications
Navigating your cybersecurity platform should be easy. That is why we have reimagined the way users access Qualys applications with the brand-new Qualys App Picker , a streamlined, intuitive navigation panel designed to make access faster, easier, and smarter in the Qualys Enterprise TruRisk...
CVE-2025-8562
creationtimestamp| type| source ---|---|--- 2025-08-25 12:49:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx7zxzisla2t...
CVE-2025-53522
creationtimestamp| type| source ---|---|--- 2025-08-25 11:41:20+00:00| seen| https://bsky.app/profile/h12o.mastodon.tokyo.ap.brid.gy/post/3lx7w6dlkdg22...
webkitgtk: Processing maliciously crafted web content may disclose internal states of the app
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper input validation, resulting in the disclosure of the internal states of the application...
webkitgtk: Processing maliciously crafted web content may disclose internal states of the app
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper input validation, resulting in the disclosure of the internal states of the application...
PT-2025-34577
Name of the Vulnerable Software and Affected Versions: YiFang CMS versions up to 2.0.5 Description: A SQL injection issue exists in the file app/logic/L tool.php due to the manipulation of the new url argument. This issue may be exploited remotely. The vendor was contacted but did not respond...
Collaborative Intelligence: Topic Modelling of Large Language Model Use in Live Cybersecurity Operations
Objective: This work describes the topic modelling of Security Operations Centre SOC use of a large language model LLM, during live security operations. The goal is to better understand how these specialists voluntarily use this tool. Background: Human-automation teams have been extensively...
Linux Distros Unpatched Vulnerability : CVE-2017-7064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected...
Malicious code in credit-app-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 987abb2d3bc139ce43e5e14a9886ee8fe46062c76f4fe32f393ffc62fc2ec4a9 The OpenSSF Package Analysis project identified 'credit-app-ui' @ 99.1.1 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41347 Malicious code in credit-app-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 987abb2d3bc139ce43e5e14a9886ee8fe46062c76f4fe32f393ffc62fc2ec4a9 The OpenSSF Package Analysis project identified 'credit-app-ui' @ 99.1.1 npm as malicious. It is considered malicious because: - The package...
CVE-2025-55619
Reolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and initialization vector. An attacker can leverage this vulnerability to decrypt access tokens and web session tokens stored inside the app via reverse engineering...