CVE-2025-66522 Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Digital IDs Common Name Field

A stored cross-site scripting XSS vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud pdfonline.foxit.com. The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result,...

Foxit PDF Editor 安全漏洞

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor that stems from the Common Name field in the Digital IDs feature not being properly cleaned or encoded, which could lead to a stored cross-site scripting attack...

SUSE: Security Advisory (SUSE-SU-2025:4423-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-52434

A stored cross-site scripting XSS vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud pdfonline.foxit.com. The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result,...

SUSE-SU-2025:4488-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed modmd ACME unintended retry intervals bsc1254511 - CVE-2025-65082: Fixed CGI environment variable override bsc1254514 - CVE-2025-58098: Fixed Server Side Includes adding query string to exec cmd=... bsc1254512 -...

CVE-2025-64221

creationtimestamp| type| source ---|---|--- 2025-12-18 09:31:53+00:00| seen| https://gist.github.com/Darkcrai86/60dff2bdc60d38d2a1a34ebcc1a510e8...

CVE-2025-64188

Incorrect Privilege Assignment vulnerability in PenciDesign Soledad soledad allows Privilege Escalation.This issue affects Soledad: from n/a through = 8.6.9...

CVE-2025-60180 WordPress WP Gravity Forms Salesforce plugin <= 1.5.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through = 1.5.1...

CVE-2025-68432

creationtimestamp| type| source ---|---|--- 2025-12-18 01:31:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7zpqzonv2u 2025-12-18 03:04:21+00:00| seen| https://infosec.exchange/users/offseq/statuses/115738349369977264 2025-12-18 03:04:22+00:00| seen|...

CVE-2021-43163

creationtimestamp| type| source ---|---|--- 2025-12-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-12-18 2026-06-23 14:06:16+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/81027123-38d0-4796-a9df-b0d9a6633a72 2026-06-30...

CVE-2025-34435

creationtimestamp| type| source ---|---|--- 2025-12-17 23:35:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7tag4nki2g...

Insertion of Sensitive Information into Externally-Accessible File or Directory

Overview @storybook/core-common is a Storybook framework-agnostic API Affected versions of this package are vulnerable to Insertion of Sensitive Information into Externally-Accessible File or Directory via the storybook build command. An attacker can access sensitive environment variables by...

CLSA-2025-1765985737 libssh: Fix of 2 CVEs

CVE-2025-5351: fix double-free conditions - CVE-2025-8114: fix NULL pointer dereference...

BELL-CVE-2025-68318

Bulletin has no description...

BELL-CVE-2025-68183

Bulletin has no description...

CVE-2021-25082

creationtimestamp| type| source ---|---|--- 2025-12-17 02:07:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25082.yaml 2025-12-18 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mac36lkbax2f...

Fedora: Security Advisory (FEDORA-2025-0e41e63705)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

What is EPSS? How to Correctly Correctly Prioritize Vulnerabilities

Let's cut right to it. Your vulnerability management team has a list of vulnerabilities longer than your arm, and every single one seems to be a top priority. But you don't have the time or resources to fix everything at once. You need a way to focus on what truly matters right now. This is the...

Malicious Package

Overview worker-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-68283

A flaw was found in the libceph module of the Linux kernel. OSD index values received from network packets were not properly validated against map-maxosd before use, with only a BUGON assertion as protection. A malicious or compromised Ceph cluster could send out-of-bounds OSD indexes, potentiall...