CVE-2025-22030

creationtimestamp| type| source ---|---|--- 2025-10-28 19:49:46+00:00| seen| Telegram/dALWFeo2zrZ4VRsUK4m318Iv2il-3pv34opQgv6QztZ7Y...

event-driven-ansible: Sensitive Internal Headers Disclosure in AAP EDA Event Streams

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible EDA Event Streams. This vulnerability allows an authenticated user to gain access to sensitive internal infrastructure headers such as X-Trusted-Proxy and X-Envoy- and event stream URLs via crafted requests and job...

event-driven-ansible: Event Stream Test Mode Exposes Sensitive Headers in AAP EDA

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible EDA Event Stream API. This vulnerability allows exposure of sensitive client credentials and internal infrastructure headers via the testheaders field when an event stream is in test mode. The possible outcome...

CVE-2025-53034

creationtimestamp| type| source ---|---|--- 2025-10-28 16:50:31+00:00| seen| Telegram/cgQhj3sGP9lvqPwfft98VF2OjDx7oyUtL4cgdlTzXUnsNc...

CVE-2025-40081

creationtimestamp| type| source ---|---|--- 2025-10-28 15:34:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4bb2y6jkk23 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-53814

creationtimestamp| type| source ---|---|--- 2025-10-28 14:30:05+00:00| seen| https://infosec.place/objects/2b5ce414-1b09-4633-9d8e-c30a1832a5a8...

CVE-2025-12262

A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /editcriteria.php. Executing manipulation of the argument critid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed an...

CVE-2025-12263

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /editjudge.php. The manipulation of the argument judgeid leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

CVE-2025-12254

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

CVE-2025-12252

A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of the argument content results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2025-12344

creationtimestamp| type| source ---|---|--- 2025-10-28 03:01:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m47wxi5m4327...

Red Hat Ansible Automation Platform Information Disclosure Vulnerability

Red Hat Ansible Automation Platform Red Hat AAP is a unified solution for strategic automation from Red Hat, Inc. An information disclosure vulnerability exists in Red Hat Ansible Automation Platform Red Hat AAP that originates from an access restriction that can be bypassed via Event Stream Test...

Red Hat Ansible Automation Platform Information Disclosure Vulnerability

Red Hat Ansible Automation Platform Red Hat AAP is a unified solution for strategic automation from Red Hat, Inc. An information disclosure vulnerability exists in Red Hat Ansible Automation Platform Red Hat AAP that originates from an access restriction that can be bypassed via EDA Event Streams...

PT-2025-44204

Name of the Vulnerable Software and Affected Versions Consul versions prior to 1.22.0 Consul Enterprise versions prior to 1.22.0 Consul Enterprise version 1.21.6 Consul Enterprise version 1.20.8 Consul Enterprise version 1.18.12 Description The event endpoint in Consul and Consul Enterprise is...

CVE-2025-12329

creationtimestamp| type| source ---|---|--- 2025-10-27 23:36:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m47lis4z7324...

CVE-2025-34133

creationtimestamp| type| source ---|---|--- 2025-10-27 15:49:06+00:00| seen| Telegram/Tz0eCtmciCuEeGJOzaEsQaFLN57IikFD697rfEaZanqNrkM...

CVE-2025-12263

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /editjudge.php. The manipulation of the argument judgeid leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

CVE-2025-12263

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /editjudge.php. The manipulation of the argument judgeid leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

CVE-2025-12262

A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /editcriteria.php. Executing manipulation of the argument critid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed an...