CVE-2025-50065

...

Improper Neutralization of Special Elements Used in a Template Engine

Overview binarytorch/larecipe is a Generate gorgeous recipes for your Laravel applications using MarkDown Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the replaceLinks function in Models/Documentation.php. An attacke...

CVE-2025-38267

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARNON due to a commitoverrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the reader page is the same as the commit buffer...

CVE-2016-9844

creationtimestamp| type| source ---|---|--- 2025-07-08 07:10:42+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115...

CVE-2025-53611

creationtimestamp| type| source ---|---|--- 2025-07-08 06:52:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgpobwi322t...

CVE-2025-4779

creationtimestamp| type| source ---|---|--- 2025-07-07 12:10:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lteqxinb2h2r...

CVE-2023-21980

creationtimestamp| type| source ---|---|--- 2025-07-07 04:08:35+00:00| seen| https://gist.github.com/sunnysaurav83/55ee274bac86ce598c5a7a9a3fabfa4f...

python-furo-doc-2024.8.6-3.1 on GA media (moderate)

python-furo-doc-2024.8.6-3.1 on GA media Announcement ID: openSUSE-SU-2025:15270-1 Rating: moderate Cross-References: CVE-2025-5889 CVSS scores: CVE-2025-5889 SUSE : 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-5889 SUSE : 2...

CVE-2025-5817

creationtimestamp| type| source ---|---|--- 2025-07-02 08:57:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxtthku5k2r...

FreeBSD : chromium -- multiple security fixes (5c777f88-40ff-4e1e-884b-ad63dfb9bb15)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5c777f88-40ff-4e1e-884b-ad63dfb9bb15 advisory. Chrome Releases reports: This update includes 1 security fix: Tenable has extracted the preceding...

CVE-2025-47813

creationtimestamp| type| source ---|---|--- 2025-07-01 19:46:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-47813.yaml 2025-07-01 19:46:24+00:00| confirmed|...

CVE-2025-5967

creationtimestamp| type| source ---|---|--- 2025-07-01 04:09:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20004 2025-07-01 06:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsv3oixj6m2v...

CVE-2025-49493

creationtimestamp| type| source ---|---|--- 2025-06-30 19:42:46+00:00| seen| https://bsky.app/profile/xbow.com/post/3lstwxo2b5s2m 2025-06-30 20:08:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19973 2025-06-30 21:10:24+00:00| seen|...

CVE-2025-41439

CVE-2025-41439 describes a reflected cross-site scripting vulnerability in the SLNX Help Documentation of Ricoh Streamline NX. The issue arises from a vulnerable parameter which can cause arbitrary scripts to run in a user’s browser when the product is accessed. Concrete details from connected so...

CVE-2025-38089

creationtimestamp| type| source ---|---|--- 2025-06-30 07:56:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19908 2025-06-30 11:13:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lst2io2txr2r 2025-07-02 08:43:25+00:00| published-proof-of-concept|...

Ricoh Streamline NX Client Tool 跨站脚本漏洞

Ricoh Streamline NX Client Tool is a scalable document management application and tool from Ricoh Japan. A cross-site scripting vulnerability exists in Ricoh Streamline NX Client Tool, which stems from unvalidated specific parameters in the SLNX help documentation and could lead to a reflected...

CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

UBUNTU-CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

CVE-2025-5878 ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...