PT-2025-46419

Name of the Vulnerable Software and Affected Versions System Event Log Viewer Utility software affected versions not specified Description An uncontrolled search path in some System Event Log Viewer Utility software within Ring 3: User Applications may allow an escalation of privilege. A local,...

CVE-2025-60876

creationtimestamp| type| source ---|---|--- 2025-11-10 22:22:36+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cnsr65gkx2 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

EUVD-2025-48413

Malicious code in cici-sate37-sukiwir npm...

CERTFR-2025-ACT-048

creationtimestamp| type| source ---|---|--- 2025-11-10 13:15:47+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m5bpe6qei227 2025-11-11 16:03:38+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3m5ej7bb4jg2n...

CVE-2025-12933

creationtimestamp| type| source ---|---|--- 2025-11-10 09:45:58+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5bdlw25zsl2 2025-11-10 10:03:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5bemg5w7726...

EUVD-2025-41492

Malicious code in budi-wajit8-miaww npm...

PT-2025-46141

Name of the Vulnerable Software and Affected Versions Hyper Data Protector versions prior to 2.2.4.1 Description An SQL injection issue exists in Hyper Data Protector. Successful exploitation could allow remote attackers to execute unauthorized code or commands. Recommendations Update to Hyper Da...

CVE-2021-26072

creationtimestamp| type| source ---|---|--- 2025-11-07 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m52xzxenql2b...

CVE-2025-12486

Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Minimal user interaction is required to exploit this vulnerability. The specific...

Security Bulletin:Consul’s event endpoint is vulnerable to denial of service

Summary Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header. Vulnerability Details CVEID: CVE-2025-11375 DESCRIPTION: Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial ...

CVE-2025-11546

creationtimestamp| type| source ---|---|--- 2025-11-07 03:02:05+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4z3nz2gkb27 2025-11-07 04:45:25+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4zbgmnwyqj2 2025-11-07 05:53:12+00:00| seen|...

perf: Fix hang while freeing sigtrap event

...

PT-2025-45528

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.6.224 and prior Open WebUI versions 0.6.34 and prior Open WebUI version 0.6.33 and prior Description Open WebUI, a self-hosted artificial intelligence platform, contains a code injection vulnerability within the Direct...

CVE-2025-12486

Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Minimal user interaction is required to exploit this vulnerability. The specific...

CVE-2025-12486

CVE-2025-12486 covers a cross-site scripting/remote code execution vulnerability in Heimdall Data Database Proxy. The flaw arises from improper validation of user-supplied data in the handling of database event logs, enabling arbitrary script injection and allowing an attacker to execute code in ...

CVE-2025-12486 Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability

Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Minimal user interaction is required to exploit this vulnerability. The specific...

CVE-2025-12486 Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability

Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Minimal user interaction is required to exploit this vulnerability. The specific...

GHSA-PWHC-RPQ9-4C8W

creationtimestamp| type| source ---|---|--- 2025-11-06 18:58:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115504284375786423...

GHSA-8397-V66P-539M

creationtimestamp| type| source ---|---|--- 2025-11-06 15:07:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115503375634049442...

BIT-CONSUL-2025-11375 Consul's event endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header. This vulnerability, CVE-2025-11375, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...