27403 matches found
Exploit for Deserialization of Untrusted Data in Apache Tomcat
CVE-2025-24813 – Proof of Concept !Statushttps://img.shiel...
CVE-2025-9378
creationtimestamp| type| source ---|---|--- 2025-09-03 11:01:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxwi5zqlmm2n...
CVE-2025-8663
creationtimestamp| type| source ---|---|--- 2025-09-03 07:32:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxw4hardlc2w 2025-09-03 10:45:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxwhbeqvhl2r...
Improper Authentication
github.com/mattermost/mattermost-plugin-confluence is vulnerable to Improper Authentication. The vulnerability is due to missing enforcement of user authentication in the Mattermost instance, which allows an attacker to access subscription details through an unauthenticated API call to the GET...
PT-2025-35753
Name of the Vulnerable Software and Affected Versions: PDF for WPForms versions through 6.2.1 Description: The software contains a cross-site scripting XSS vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations: Update...
Release Information for Veeam ONE 13 and Updates
Updating Veeam Analytics Service Please be aware that upgrading Veeam Analytics Service agents on monitored Veeam Backup & Replication servers may result in an automatic server restart. To reduce operational impact, the upgrade should be treated as a disruptive maintenance activity and scheduled...
Linux Distros Unpatched Vulnerability : CVE-2025-26619
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. In vega 5.30.0 and lower and in...
SUSE: Security Advisory (SUSE-SU-2025:03037-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2025-1903)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2025:03053-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2025:03039-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2025:02522-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
pdfseparate DoS
The vulnerability of the pdfseparate library used by Poppler for displaying PDF files is related to unmanaged recursion. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted PDF file...
Linux Distros Unpatched Vulnerability : CVE-2020-10184
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a denial of servic...
Linux Distros Unpatched Vulnerability : CVE-2021-20326
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4...
CVE-2025-22423
In ParseTag of dngifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-9328
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2025-9324
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must...
