CVE-2025-57814: Server-Side Request Forgery (SSRF)

request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Versions 1.x.x and earlier contain a vulnerability where HTTPS requests to 127.0.0.1 bypass IP address filtering, while HTTP requests are correctly blocked. This allows attackers to...

CVE-2025-9394

creationtimestamp| type| source ---|---|--- 2025-08-24 18:39:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx6536s6k42w...

CVE-2025-51501

creationtimestamp| type| source ---|---|--- 2025-08-23 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lx3ulrprlq2m...

CVE-2025-57800

creationtimestamp| type| source ---|---|--- 2025-08-22 20:14:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwzbgorvgu2q...

CVE-2025-9255

creationtimestamp| type| source ---|---|--- 2025-08-22 16:23:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwyukz5zdi2n...

CVE-2025-9299

creationtimestamp| type| source ---|---|--- 2025-08-21 14:23:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lww5etaz3h2l...

CVE-2025-55294

creationtimestamp| type| source ---|---|--- 2025-08-20 07:31:47+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwsvvkqayw2p...

CVE-2025-43745

creationtimestamp| type| source ---|---|--- 2025-08-19 20:43:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwrrnozeja2t...

https-curl (1.7.9), multi-installer (0.0.1) +3 more potentially affected by CVE-2025-55294 via screenshot-desktop (>=1.1.0, <=1.15.1)

screenshot-desktop NPM version =1.1.0, =1.0.0, =1.0.0, =1.3.0, =1.3.6 Source cves: CVE-2025-55294 Source advisory: OSV:GHSA-GJX4-2C7G-FM94...

https-curl (1.7.9), multi-installer (0.0.1) +3 more potentially affected by CVE-2025-55294 via screenshot-desktop (>=1.1.0, <=1.15.1)

screenshot-desktop NPM version =1.1.0, =1.0.0, =1.0.0, =1.3.0, =1.3.6 Source cves: CVE-2025-55294 Source advisory: SNYK:JS-SCREENSHOTDESKTOP-12028632...

GHSA-HQR4-4GFC-5P2J

creationtimestamp| type| source ---|---|--- 2025-08-19 18:39:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115056886214495468...

CVE-2025-57725

creationtimestamp| type| source ---|---|--- 2025-08-19 06:58:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwqdkknwtx27...

CVE-2023-4130

creationtimestamp| type| source ---|---|--- 2025-08-17 00:13:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwklyopmra26 2025-09-16 08:23:58+00:00| seen| https://gist.github.com/Darkcrai86/7a0cc78044d21e5ac83881bd0f5da524 2025-10-01 23:12:07+00:00| seen|...

CVE-2025-9023

creationtimestamp| type| source ---|---|--- 2025-08-15 10:31:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwgnmmcdbx2a 2025-08-15 12:17:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwgtjey7wr2d 2025-08-15 13:32:59+00:00| seen|...

CVE-2025-8968

creationtimestamp| type| source ---|---|--- 2025-08-14 19:35:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwf3jxadbp23...

CVE-2025-20306

creationtimestamp| type| source ---|---|--- 2025-08-14 19:27:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwf34eci5y2e...

CVE-2024-47698

creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

CVE-2024-46755

creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

CVE-2024-7402

creationtimestamp| type| source ---|---|--- 2025-08-14 07:14:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwds5ix2zx2g...

CVE-2025-54809

F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...