24496 matches found
CVE-2025-57878
creationtimestamp| type| source ---|---|--- 2025-09-29 18:58:42+00:00| seen| Telegram/g4nNY8IQP8JMFwK51h2FMchAXivEjh6CugNCeld92VjTeI0...
CVE-2025-57874
creationtimestamp| type| source ---|---|--- 2025-09-29 18:58:39+00:00| seen| Telegram/uDB0hyBSK2evk5Zo03dtoPTpqeBWhcqqv3G9evqNKjHKZAs...
CVE-2025-60096
creationtimestamp| type| source ---|---|--- 2025-09-29 17:01:16+00:00| seen| Telegram/ekBUGq4CNXut3VrGAQReDbswt7QXZnWt7NlDBxLVaWPqt24...
CVE-2025-11155
creationtimestamp| type| source ---|---|--- 2025-09-29 15:58:42+00:00| seen| Telegram/oemz4rrMjPkoti7Y-Cnq1L4zOaNi0dGKYbmpCBhBwvbWM1s...
CVE-2025-10346
creationtimestamp| type| source ---|---|--- 2025-09-29 08:59:24+00:00| seen| Telegram/TBw3prpN5euFqDMO3FIfit9GEDDpRFp4C2uazUa0OFrWeg...
Security Bulletin:IBM Event Endpoint Management is vulnerable to Sensitive Information Leakage and Request Smuggling (CVE-2025-4673,CVE-2025-22871)
Summary Operator of IBM Event Endpoint Management is vulnerable to Sensitive Information Leakage and Request Smuggling due to apache HTTP pomponents. IBM Event Endpoint Management uses HTTP components to expose secure event APIs via its Event Gateway, enabling client applications to interact with...
Security Bulletin: IBM Event Endpoint Management is vulnerable to Remote Code Execution and Server-Side Request Forgery attacks (CVE-2025-27818,CVE-2025-27817)
Summary Operator of IBM Event Endpoint Management is vulnerable to remote code execution and server-side request forgery due to unsafe deserialization and misconfigured OAuthBearer endpoints in SASL JAAS configuration. Vulnerability Details CVEID:CVE-2025-27818 DESCRIPTION: A possible security...
Security Bulletin: IBM Event Endpoint Management is vulnerable to HTTP Parameter Pollution (HPP) attack (CVE-2025-7783)
Summary Operator of IBM Event Endpoint Management is vulnerable to an HTTP Parameter Pollution HPP attack due to the use of random values in the form-data module. This vulnerability affects how data from HTML forms is processed, particularly during form submission or when interacting with event...
Security Bulletin: IBM Event Processing is vulnerable due to Incorrect Default Permissions (CVE-2025-30706)
Summary IBM Event Processing is vulnerable due to incorrect default permissions in the MySQL Connectors product specifically, Connector/J. This connector is used in IBM Event Processing to enable Java-based components to interact with MySQL databases for storing and retrieving event-related data...
Security Bulletin:IBM Event Streams is vulnerable to Regular Expression Denial of Service (ReDoS) ( CVE-2025-1302).
Summary IBM Event Streams is vulnerable to Regular Expression Denial of Service ReDoS caused by Inefficient Regular Expression Complexity. This issue affects JavaScript code that is compiled using certain versions of Babel . Babel is a JavaScript transcompiler used for converting modern JavaScrip...
Security Bulletin:IBM Event Streams is vulnerable to HTTP Parameter Pollution (HPP) attack (CVE-2025-7783).
Summary IBM Event Streams is vulnerable to an HTTP Parameter Pollution HPP attack due to the use of random values in the form-data module. This vulnerability affects how data from HTML forms is processed, particularly during form submission or when interacting with event listeners tied to form...
CVE-2025-11126
creationtimestamp| type| source ---|---|--- 2025-09-29 01:33:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzwujtr3b72e 2025-09-29 08:41:54+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lzxmhpp7qc2j 2025-09-30 02:09:55+00:00| seen|...
FreshRSS 跨站脚本漏洞
FreshRSS is a free, self-hosted RSS aggregator from FreshRSS Open Source. A cross-site scripting vulnerability exists in FreshRSS versions 1.26.3 and earlier, which stems from not cleaning certain event handler attributes in the feed content and could lead to a cross-site scripting attack...
Characterizing Event-Themed Malicious Web Campaigns: A Case Study on War-Themed Websites
Cybercrimes such as online scams and fraud have become prevalent. Cybercriminals often abuse various global or regional events as themes of their fraudulent activities to breach user trust and attain a higher attack success rate. These attacks attempt to manipulate and deceive innocent people int...
CVE-2025-11091
creationtimestamp| type| source ---|---|--- 2025-09-28 03:03:00+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzuj2thuay2e...
The vulnerability in the `net/rxrpc/peer_event.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the net/rxrpc/peerevent.c component in the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-59939
creationtimestamp| type| source ---|---|--- 2025-09-27 09:03:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzsmq6pjfy2m 2025-09-27 09:13:25+00:00| seen| https://gist.github.com/Darkcrai86/b3260d2fae9dfb8a187c01192a2d1380...
CVE-2025-59938
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd is vulnerable to a heap buffer overflow when parsing XML elements from Windows EventChannel messages. This issue has been patched in...
CVE-2025-59938 Heap buffer overflow in wazuh-analysisd
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd is vulnerable to a heap buffer overflow when parsing XML elements from Windows EventChannel messages. This issue has been patched in...