CVE-2025-65657

creationtimestamp| type| source ---|---|--- 2025-12-03 00:40:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m727txgpq52j...

CVE-2025-13946

MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libsoup (UTSA-2025-991029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991029 advisory. A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing...

CVE-2025-13640

creationtimestamp| type| source ---|---|--- 2025-12-02 21:25:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6zuys5bor2w 2025-12-03 13:30:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m73kveq7ft2l 2025-12-09 17:29:16+00:00| seen|...

Attackers Actively Exploiting Critical Vulnerability in King Addons for Elementor Plugin

On July 24th, 2025, we received a submission for a Privilege Escalation vulnerability in King Addons for Elementor, a WordPress plugin with more than 10,000 active installations. This vulnerability makes it possible for an unauthenticated attacker to grant themselves administrative privileges by...

CVE-2025-41013

creationtimestamp| type| source ---|---|--- 2025-12-02 17:09:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6zgolboun2n...

CVE-2025-11783

creationtimestamp| type| source ---|---|--- 2025-12-02 15:05:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6z7rf5fgd2q...

GHSA-6Q4X-M86J-GFWJ

creationtimestamp| type| source ---|---|--- 2025-12-02 14:53:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115650540529991732...

CVE-2025-11781

creationtimestamp| type| source ---|---|--- 2025-12-02 14:40:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6z6em7gby2n...

CVE-2025-41014

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in...

CVE-2025-13372

An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed to QuerySet.annotate or QuerySet.alias on PostgreSQL. Earlier...

CVE-2025-41014 User Enumeration vulnerability in TCMAN GIM

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in...

CLSA-2025-1764678192 libsoup: Fix of 2 CVEs

CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic...

CVE-2025-13735

Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR LapwingLinux on Linux nrfw modules. This vulnerability is associated with program files Code/nrfw/DLP/src/NrCgi.C. This issue affects LapwingLinux: before 2025/11/26...

CVE-2025-13658

creationtimestamp| type| source ---|---|--- 2025-12-02 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-336-01 2025-12-03 00:03:08+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m725ryqnwb2b 2025-12-03 00:03:08+00:00| seen|...

CVE-2025-13685

creationtimestamp| type| source ---|---|--- 2025-12-02 08:14:07+00:00| seen| https://gist.github.com/Darkcrai86/37c29ab9045201caf2cdb8f06c439323 2025-12-02 10:39:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6yqumcbnb2u...

CVE-2025-58483

creationtimestamp| type| source ---|---|--- 2025-12-02 02:44:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xwcz2ur42q...

CVE-2025-13808

creationtimestamp| type| source ---|---|--- 2025-12-02 02:20:14+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3m6xuy7glpb27...

CVE-2025-48572

creationtimestamp| type| source ---|---|--- 2025-12-01 22:25:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115646657177918322 2025-12-02 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1693 2025-12-02 09:32:43+00:00| seen|...

CVE-2025-66300

creationtimestamp| type| source ---|---|--- 2025-12-01 20:45:31+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-p4ww-mcp9-j6f2 2025-12-01 22:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xiilr7l42b 2025-12-02 18:10:08+00:00| seen...