GHSA-QGVM-92M2-J87G vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-533C-PPXJ-MJQJ vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-495W-CQV6-WR59

creationtimestamp| type| source ---|---|--- 2025-12-05 16:43:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115667959131777282...

CVE-2025-14104

creationtimestamp| type| source ---|---|--- 2025-12-05 16:41:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115667951619073794 2025-12-05 16:55:13+00:00| seen| https://gist.github.com/Darkcrai86/acab713a6562bbf2fe78f6ee421d7241 2025-12-05 17:16:43+00:00| seen|...

PromptPwnd Vulnerability Exposes AI driven build systems to Data Theft

Aikido Security exposes a new AI prompt injection flaw in GitHub/GitLab pipelines, letting attackers steal secrets. Major companies affected...

CGA-GC5M-FH7G-93XP

Bulletin has no description...

GHSA-2CF5-4W76-R9QV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

Sift or Get off the PoC: Applying Information Retrieval to Vulnerability Research with SiftRank

Security research is fundamentally a problem of resource constraint and consequent prioritization. There is simply too much attack surface and too little time and energy to spend analyzing it all. The most effective security researchers are often those who are most skilled at intuitively deciding...

CGA-HJ4J-MCX4-5WRP

Bulletin has no description...

CGA-GGG9-36F6-QF33

Bulletin has no description...

CGA-Q4C5-96WQ-QQVC

Bulletin has no description...

GHSA-9MPM-9PXH-MG4F

creationtimestamp| type| source ---|---|--- 2025-12-03 20:46:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115657592254208627...

GHSA-V8V5-C872-MF8R

creationtimestamp| type| source ---|---|--- 2025-12-03 19:30:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115657293148457938...

Exploit for CVE-2025-55182

GitHub CVE Scanner 🔍 Quickly scan GitHub repositories for c...

CVE-2025-66220

creationtimestamp| type| source ---|---|--- 2025-12-03 17:01:36+00:00| published-proof-of-concept| https://github.com/envoyproxy/envoy/security/advisories/GHSA-rwjg-c3h2-f57p...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the deployments configured with ACME and SCEP provisioners. An attacker can gain unauthorized access to sensitive resources by bypassing authorization controls. Remediation Upgrade...

GHSA-9QR9-H5GF-34MP

creationtimestamp| type| source ---|---|--- 2025-12-03 16:43:56+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3m73vpks5fm2i 2025-12-03 17:00:30+00:00| seen| https://bsky.app/profile/hnbot.gsuscs.xyz/post/3m73wn646xc2m 2025-12-03 17:07:45+00:00| seen|...

Exposed Dangerous Method or Function

Overview Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via the sse or streaming transport modes. An attacker can gain unauthorized access to internal resources by tricking a victim into visiting a malicious website or serving a malicious advertisement...

CGA-9CWM-V7FH-4MFW

Bulletin has no description...

CVE-2025-62575

creationtimestamp| type| source ---|---|--- 2025-12-03 06:10:08+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m72sc7m7zc2g 2025-12-03 07:42:50+00:00| seen| https://gist.github.com/Darkcrai86/61cfb0b7823317e3619ec7a2c6465b58 2025-12-03 08:03:29+00:00| seen|...