CVE-2023-41471

creationtimestamp| type| source ---|---|--- 2025-08-29 22:59:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxl5wnqecb2m...

CVE-2025-57822

creationtimestamp| type| source ---|---|--- 2025-08-29 22:14:05+00:00| seen| https://bsky.app/profile/feedbot.unronritaro.net/post/3lxl3fjqid42y 2025-08-30 01:04:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxlevsjl742j 2025-08-30 09:00:07+00:00| seen|...

CVE-2025-9669

A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...

CVE-2025-9669 Jinher OA GetTreeDate.aspx sql injection

A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...

CVE-2025-9669 Jinher OA GetTreeDate.aspx sql injection

A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...

CVE-2025-9662

creationtimestamp| type| source ---|---|--- 2025-08-29 18:07:50+00:00| seen| https://gist.github.com/Darkcrai86/58bc2b6ce80d3c7b4be4c6e0aeae4163...

CVE-2025-30277 Qsync Central

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2025-30263 Qsync Central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.0...

CVE-2025-29893

The CVE-2025-29893 issue affects QNAP Qsync Central and is caused by an SQL injection vulnerability from lack of validation of externally entered SQL statements. A remote attacker who has a user account could exploit this to execute unauthorized code or commands. The vulnerability is rated HIGH (...

CVE-2025-9603

creationtimestamp| type| source ---|---|--- 2025-08-29 13:08:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115112208600347245...

SUSE-SU-2025:03026-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-4945: Add value checks for date/time parsing bsc1243314...

CVE-2025-57819

creationtimestamp| type| source ---|---|--- 2025-08-29 11:02:23+00:00| seen| https://bsky.app/profile/infosecbriefly.bsky.social/post/3lxjvugmbyo2c 2025-08-29 12:03:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/49501 2025-08-29 13:40:49+00:00| seen|...

CVE-2025-52100

creationtimestamp| type| source ---|---|--- 2025-08-29 09:00:04+00:00| published-proof-of-concept| Telegram/bKP-iwwMQtOOWDZQExb8JL74Stavj2rFrcGJwGzD4-08zAc...

CVE-2025-8861

creationtimestamp| type| source ---|---|--- 2025-08-29 06:38:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxjh5b7xmu2c...

Fedora 29 : edk2 (2019-bff1cbaba3)

The remote Fedora 29 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2019-bff1cbaba3 advisory. Use YYYYMMDD versioning to fix upgrade path ---- Update to stable-201903 Update to openssl-1.1.0j Move to python3 deps Tenable has extracted the...

CVE-2025-54080

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

CVE-2025-55304

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-service was found in Exiv2 version 0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata can cause Exiv2 to run for a long time...

PT-2025-35304

Name of the Vulnerable Software and Affected Versions: Jinher OA version 1.0 Description: A vulnerability exists in the processing of the GetTreeDate.aspx file within Jinher OA. Manipulation of the ID argument results in a SQL injection. Remote exploitation is possible. The exploit has been...

CVE-2025-9575

creationtimestamp| type| source ---|---|--- 2025-08-28 18:24:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107787041182636...

CVE-2025-7955

creationtimestamp| type| source ---|---|--- 2025-08-28 15:00:05+00:00| published-proof-of-concept| Telegram/ImGYwi0hkfRavtFIvYQEJE2P5zoE2vWG2nPNeSrjv4QRU 2025-08-28 15:00:11+00:00| published-proof-of-concept| Telegram/jYYy87XvTbJ0HkdOerY1O6SBQtIentXQFx-G2JEFfg-qchE 2025-08-30 21:02:33+00:00| seen...