24735 matches found
CVE-2025-8550
creationtimestamp| type| source ---|---|--- 2025-08-05 19:33:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46696 2025-08-06 03:00:06+00:00| published-proof-of-concept| Telegram/gsIxsEVZkehNrEHfOWeYcpkBB1bmett9R7uz7cEInOPnwUM 2025-08-08 21:02:20+00:00| seen|...
CVE-2025-50675
creationtimestamp| type| source ---|---|--- 2025-08-05 13:47:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46666 2025-08-05 15:41:14+00:00| seen| https://t.me/GithubRedTeam/46676 2025-08-05 21:00:04+00:00| published-proof-of-concept|...
Linux Distros Unpatched Vulnerability : CVE-2018-12392
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor eve...
kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
In the Linux kernel, the following vulnerability has been resolved: misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram struct vmcieventqp allocated by qpnotifypeer contains padding, which may carry uninitialized data to the userspace, as observed by KMSAN: BUG: KMSAN: kernel-infoleak in...
xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leadin...
Zero Day Quest: Join the largest hacking event with up to $5 million in total bounty awards
Last year, we announced the largest hacking event in history: Zero Day Quest, with up to $4 million in bounty awards. The response from the global security community was incredible and helped improve security for our customers and partners. This year, Zero Day Quest is back with even more potenti...
Whispering Agents: an Event-Driven Covert Communication Protocol for the Internet of Agents
The emergence of the Internet of Agents IoA introduces critical challenges for communication privacy in sensitive, high-stakes domains. While standard Agent-to-Agent A2A protocols secure message content, they are not designed to protect the act of communication itself, leaving agents vulnerable t...
U.S. Dept Of Defense: Cross-Site Scripting via 'EVENT_DESCRIPTION' parameter
A Cross-Site Scripting XSS vulnerability was discovered in the POST method on the website, specifically through the EVENTDESCRIPTION parameter. Exploitation of this vulnerability could have led to severe consequences, including session hijacking. The vulnerability was caused by insufficient...
RHSA-2024:3044
creationtimestamp| type| source ---|---|--- 2025-08-03 06:50:44+00:00| seen| Telegram/ItMQbBDIO3Mwpygz9LINoBIDxbUdpPj4cS5kJ3oyZbjc4...
CVE-2025-52132
The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page...
CVE-2025-52132
The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page...
CVE-2025-52132
CVE-2025-52132 affects the Mocca Calendar application for XWiki (pre-2.15). The vulnerability is an XSS flaw triggered by the title on the View Event page. Affected versions are Mocca Calendar prior to 2.15. The root cause is an improper sanitization/encoding of the title parameter on the event v...
PT-2025-31765 · Unknown · Mocca Calendar
Name of the Vulnerable Software and Affected Versions: Mocca Calendar versions prior to 2.15 Description: The Mocca Calendar application is susceptible to a cross-site scripting XSS issue. This issue occurs through manipulation of the title field when viewing an event page. Recommendations: Updat...
CVE-2025-52132
The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page...
CVE-2025-23287
creationtimestamp| type| source ---|---|--- 2025-08-02 22:51:41+00:00| seen| Telegram/-ASqnEqR5uSqlrwpKxVkk2LND732dt9Y9eAaTZknwZ-sgA...
RHSA-2024:3855
creationtimestamp| type| source ---|---|--- 2025-08-02 17:49:07+00:00| seen| Telegram/lFaLa7AjNm8LdxpGuB3l4qzVYw36EtRcWGhupmMqMVI5ysU...
RHSA-2024:4222
creationtimestamp| type| source ---|---|--- 2025-08-01 19:46:22+00:00| seen| Telegram/O8FwmjqjKQMaQrdgMgHP9iBegxKxQxSENSkPsU2n4egHQc...
RHSA-2024:4070
creationtimestamp| type| source ---|---|--- 2025-08-01 19:46:22+00:00| seen| Telegram/O8FwmjqjKQMaQrdgMgHP9iBegxKxQxSENSkPsU2n4egHQc...