CVE-2025-54599

The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO is used, when a victim changes the email address that they have configured. To exploit this, an attacker would create their own account and perform an SSO login. The roo...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by the use of InputDispatcher.cpp after KeyEventLockedInterrupt. An attacker can exploit the vulnerability to elevate privileges...

Bevy Event 安全漏洞

Bevy Event is a communication mechanism in the Bevy Engine from Bevy USA. A security vulnerability exists in Bevy Event version 2025-07-22 and earlier, which stems from a misconfiguration of SSO and could lead to account takeover...

Linux Distros Unpatched Vulnerability : CVE-2025-22236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

Online Event Judging System create_account.php File SQL Injection Vulnerability

Online Event Judging System is an online event judging system. Online Event Judging System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fname in the file /createaccount.php. The vulnerability can be...

CVE-2025-54599

The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO is used, when a victim changes the email address that they have configured. To exploit this, an attacker would create their own account and perform an SSO login. The roo...

Linux Distros Unpatched Vulnerability : CVE-2018-1045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.x, there is XSS via a calendar event name. CVE-2018-1045 Note that Nessus relies on the presence of the package as reported by the vendor...

PT-2025-35545

Name of the Vulnerable Software and Affected Versions: Endress+Hauser Promag 10 versions affected versions not specified Description: A low-privileged attacker within Bluetooth range may be able to access the password of a higher-privilege user Maintenance by viewing the device’s event log. This...

Linux Distros Unpatched Vulnerability : CVE-2025-22239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arbitrary event injection on Salt Master. The master's minionevent method can be used by and authorized minion to send arbitrary events onto the master's event...

CVE-2025-54599

The CVE-2025-54599 entry concerns Bevy Event service versions through 2025-07-22 (used for eBay Seller Events). Affected component is the SSO configuration handling that allows account takeover when a victim changes the configured email address. The root cause is a misconfiguration of SSO, enabli...

CVE-2023-49371

creationtimestamp| type| source ---|---|--- 2025-09-01 23:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3lxsqigshuv25...

CVE-2025-9810

creationtimestamp| type| source ---|---|--- 2025-09-01 22:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxspb3b7or27...

CVE-2025-9799

A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request...

CVE-2025-9799

CVE-2025-9799 affects Langfuse up to version 3.88.0. The vulnerability is in the Webhook Handler’s WebSocket/HTTP code path, specifically the function promptChangeEventSourcing in web/src/features/prompts/server/routers/promptRouter.ts. Manipulation of this function can lead to server-side reques...

CVE-2025-9799 Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery

A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request...

CVE-2025-9799 Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery

A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request...

CVE-2025-9780

creationtimestamp| type| source ---|---|--- 2025-09-01 14:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxrual7smz2r...

CVE-2025-9766

creationtimestamp| type| source ---|---|--- 2025-09-01 10:57:45+00:00| seen| https://gist.github.com/Darkcrai86/a49e83268a3f20bba119e98e7807fbae...

CVE-2025-20704

creationtimestamp| type| source ---|---|--- 2025-09-01 09:07:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxrasxlq4g2r...

CVE-2025-54857

creationtimestamp| type| source ---|---|--- 2025-09-01 06:02:00+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxqwhzos7c2p 2025-09-01 09:36:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxrci7n4zs27 2025-09-01 09:41:43+00:00| seen|...