CVE-2025-62665

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Skin:BlueSky allows Stored XSS.This issue affects Mediawiki - Skin:BlueSky: from master before 1.39...

CVE-2025-9574

creationtimestamp| type| source ---|---|--- 2025-10-20 18:00:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nfilqxhc2i 2025-10-21 08:05:10+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3ouociron2k 2025-10-23 10:00:00+00:00| seen|...

CVE-2025-57838

creationtimestamp| type| source ---|---|--- 2025-10-20 08:55:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3mgzalfy32i...

Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞

Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both a type of network access controller from Azure Access Technology, Inc. A security vulnerability exists in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 versions 1.19.5 and earlier, which stems from...

BlueCodeAgent: A Blue Teaming Agent Enabled by Automated Red Teaming for CodeGen AI

As large language models LLMs are increasingly used for code generation, concerns over the security risks have grown substantially. Early research has primarily focused on red teaming, which aims to uncover and evaluate vulnerabilities and risks of CodeGen models. However, progress on the blue...

CVE-2025-62672

creationtimestamp| type| source ---|---|--- 2025-10-19 03:35:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3jeohl4m72m...

CVE-2025-11925

Incorrect Content-Type header in one of the APIs text/html instead of application/json replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

EUVD-2025-34964

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Skin:BlueSky allows Stored XSS.This issue affects Mediawiki - Skin:BlueSky: from master before 1.39...

CVE-2025-62665 Stored XSS through system messages in Skin:BlueSky

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Skin:BlueSky allows Stored XSS.This issue affects Mediawiki - Skin:BlueSky: from master before 1.39...

EUVD-2025-34934

Incorrect Content-Type header in one of the APIs text/html instead of application/json replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-11925

The CVE-2025-11925 issue affects Azure Access Technology BLU-IC2 and BLU-IC4 (through version 1.19.5). The root cause is an improperly set Content-Type header in an API response, sending text/html instead of application/json. This mismatch could allow injection of HTML/JavaScript into replies. Ex...

CVE-2025-9548

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error...

EUVD-2025-34698

Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

EUVD-2025-34615

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error...

CVE-2025-9548

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error...

CVE-2025-9548

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error...

Lenovo Power Management Driver 安全漏洞

Lenovo Power Management Driver is a power management driver from Lenovo China. A security vulnerability exists in Lenovo Power Management Driver, which stems from the presence of a null pointer dereference that could lead to a Windows blue screen error...

CVE-2025-9336

A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may leading to a system crash BSOD or other potentially undefined execution. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory f...

CVE-2025-37729

creationtimestamp| type| source ---|---|--- 2025-10-14 03:21:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m34rk7557r2f 2025-10-15 07:03:44+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3m37ogrbh7s2k 2025-10-15 20:51:56+00:00| seen|...

CVE-2025-57200

creationtimestamp| type| source ---|---|--- 2025-10-13 13:14:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/55311 2025-12-03 16:29:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m73uwdw6rr2w...