PT-2025-67: XML external entity leads to Local File Read and Server-side request forgery in FastReport.NET

The vulnerability was identified in FastReport .NET, versions 2024.2.20. The discovered vulnerability, due to the ability to inject and expand external entities, can be exploited by an attacker to read arbitrary local files and perform server‑side request forgery SSRF with full response retrieval...

CVE-2025-47813

creationtimestamp| type| source ---|---|--- 2025-07-01 19:46:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47813.yaml 2025-07-01 19:46:24+00:00| confirmed|...

CVE-2025-48954

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19462 2025-08-05 19:56:00+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-48954.yaml 2025-08-06...

GHSA-88CV-MJ24-8W3Q

creationtimestamp| type| source ---|---|--- 2025-06-24 11:11:05+00:00| confirmed| https://gist.github.com/FrancoisCapon/a196def512f709769d99d9fba9f55cfc...

PT-2025-91: Local Privilege Escalation in Mullvad VPN

The vulnerability was identified in Mullvad VPN, version 2025.4. The discovered vulnerability allows an attacker to escalate privileges from a normal user to root. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 24.06.2025 Recommendations: Update to version 2025.7 or...

CVE-2020-36333

creationtimestamp| type| source ---|---|--- 2025-06-21 05:08:44+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-36333.yaml 2025-06-24 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lseymlaka722...

CVE-2024-29198

creationtimestamp| type| source ---|---|--- 2025-06-17 19:39:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18654 2025-07-14 12:40:37+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-29198.yaml 2025-07-18...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: It is now possible for exp to not be removed during the call to nfctfindexpectation. Currently, when nfconntrackin calls nfctfindexpectation, exp is removed from the hash table. However, in some scenarios, we expect ex...

CVE-2018-11133

creationtimestamp| type| source ---|---|--- 2025-06-10 20:41:02+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-11133.yaml 2025-06-10 20:41:02+00:00| confirmed|...

CVE-2023-30192

creationtimestamp| type| source ---|---|--- 2025-06-09 14:27:13+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-30192.yaml 2025-06-11 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lreckkhkef24...

CVE-2020-5766

creationtimestamp| type| source ---|---|--- 2025-06-09 10:26:51+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-5766.yaml 2025-06-10 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrbs3qxngf22...

CVE-2021-33558

creationtimestamp| type| source ---|---|--- 2025-06-09 08:11:19+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-33558.yaml 2025-06-12 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrgsziadi62h...

CVE-2018-12455

creationtimestamp| type| source ---|---|--- 2025-06-03 12:58:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-12455.yaml 2025-06-04 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqspc47a2d2i...

CVE-2020-12262

creationtimestamp| type| source ---|---|--- 2025-05-30 17:26:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-12262.yaml 2025-05-31 21:02:17+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingbowdy27...

CVE-2020-36728

creationtimestamp| type| source ---|---|--- 2025-05-30 10:39:34+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-36728.yaml 2025-05-31 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingbyzwk2u 2026-01-05...

CVE-2024-4620

creationtimestamp| type| source ---|---|--- 2025-05-29 09:42:55+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-4620.yaml 2025-05-31 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingchywa2c...

CVE-2020-24285

creationtimestamp| type| source ---|---|--- 2025-05-28 10:48:45+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-24285.yaml 2025-05-30 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqg4xgnsmk2v...

CVE-2023-38879

creationtimestamp| type| source ---|---|--- 2025-05-27 08:09:41+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-38879.yaml 2025-05-27 21:02:16+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lq6lkkrkoi22...

CVE-2024-2667

creationtimestamp| type| source ---|---|--- 2025-05-26 22:25:48+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-2667.yaml 2025-05-26 22:25:48+00:00| confirmed|...

CVE-2024-48251

Wavelog 1.8.5 allows Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...