PT-2025-52442

Name of the Vulnerable Software and Affected Versions Restajet Information Technologies Inc. Online Food Delivery System versions through 19122025 Description A Cross-Site Request Forgery CSRF issue exists in Restajet Information Technologies Inc. Online Food Delivery System. This allows an...

CVE-2025-64223

creationtimestamp| type| source ---|---|--- 2025-12-18 09:31:13+00:00| seen| https://gist.github.com/Darkcrai86/b99ba0b12c07620193ab9f5b0c277790...

December 18, 2025—KB5074975 (OS Build 17763.8148) Out-of-band

None None...

Security Updates for Microsoft Windows Admin Center (December 2025)

The The Microsoft Windows Admin Center installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2025-64669 Note that Nessus has not...

CVE-2025-67897

In Sequoia before 2.1.0, aeskeyunwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet...

CVE-2025-36747

creationtimestamp| type| source ---|---|--- 2025-12-13 09:35:18+00:00| seen| https://infosec.exchange/users/offseq/statuses/115711575109311329 2025-12-13 09:35:20+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7ucgdm4j22a 2025-12-13 11:49:38+00:00| seen|...

CVE-2025-10738

creationtimestamp| type| source ---|---|--- 2025-12-13 07:03:22+00:00| seen| https://infosec.exchange/users/offseq/statuses/115710977696604993 2025-12-13 07:03:23+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7tzwnt5rw2g 2025-12-13 11:25:30+00:00| seen|...

CVE-2025-67749

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory...

CISA Software Acquisition Guide Supplier Response Web Tool 安全漏洞

CISA Software Acquisition Guide Supplier Response Web Tool is an interactive Web tool from the CISA organization in the United States. A security vulnerability exists in versions of the CISA Software Acquisition Guide Supplier Response Web Tool prior to 2025-12-11, which stems from a cross-site...

CVE-2025-58130

creationtimestamp| type| source ---|---|--- 2025-12-11 21:26:54+00:00| seen| https://seclists.org/oss-sec/2025/q4/268 2025-12-11 22:55:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m7qo72b4gy2f 2025-12-12 11:23:54+00:00| seen|...

CVE-2025-55816

HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting XSS in the /modificaapp.php file...

INE Highlights Enterprise Shift Toward Hands-On Training Amid Widening Skills Gaps

Cary, North Carolina, USA, 11th December 2025, CyberNewsWire...

CVE-2025-13978

creationtimestamp| type| source ---|---|--- 2025-12-11 07:30:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7p2jib5na2e 2025-12-11 15:25:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7pv2q3ouq2z...

CVE-2025-67713

Miniflux 2 is an open source feed reader. Versions 2.2.14 and below treat redirecturl as safe when url.Parse....IsAbs is false, enabling phishing flows after login. Protocol-relative URLs like //ikotaslabs.com have an empty scheme and pass that check, allowing post-login redirects to...

Security Updates for Microsoft Word Products C2R (December 2025)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has instead...

SAP NetWeaver AS Missing Authentication (December 2025)

The version of SAP NetWeaver Application Server detected on the remote host is affected by a missing authentication vulnerability as disclosed in the SAP Security Patch Day December 2025: - The SAP Internet Communication Framework does not conduct any authentication checks for features that need...

SAP BusinessObjects Business Intelligence Platform DoS (December 2025)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote host is affected by a denial of service vulnerability as disclosed in the SAP Security Patch Day December 2025: - SAP Business Objects allows an unauthenticated attacker to flood the service due to improper...

Security Updates for Microsoft Excel Products C2R (December 2025)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-62553, CVE-2025-62556...

CVE-2025-65807

An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command...

CVE-2025-13339

creationtimestamp| type| source ---|---|--- 2025-12-10 07:10:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7miwp5sjw2y 2025-12-10 07:45:41+00:00| seen| https://gist.github.com/Darkcrai86/54a35bd8d99ef7098f2e2b7b8465278c 2025-12-10 08:07:48+00:00| seen|...