CVE-2025-43255

creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-674/...

CVE-2025-8321

creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-712/ 2025-07-30 03:37:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv5oypy4xl2q...

CVE-2025-8264

Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modif...

PT-2025-31179 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The vulnerability is a cross-site scripting XSS issue. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer...

About the security content of iPadOS 17.7.9

About the security content of iPadOS 17.7.9 This document describes the security content of iPadOS 17.7.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

TSplus Remote Access Admin Tool 安全漏洞

The TSplus Remote Access Admin Tool is a tool for centralized configuration and administration of the TSplus Remote Access Server from TSplus France. A security vulnerability exists in versions prior to TSplus Remote Access Admin Tool v18.40.6.17, which stems from an unsalted PIN hash stored in t...

CVE-2025-54426

creationtimestamp| type| source ---|---|--- 2025-07-28 23:18:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2q2nxmjk27...

CVE-2025-54429

creationtimestamp| type| source ---|---|--- 2025-07-28 23:12:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2ppvo5qa2w...

GHSA-QXP5-GWG8-XV66

creationtimestamp| type| source ---|---|--- 2025-07-28 21:50:46+00:00| seen| https://gist.github.com/puerco/0e45f7acdb725a96b024bfea9e9225de...

CVE-2025-54423

copyparty is a portable file server. In versions up to and including versions 1.18.4, an unauthenticated attacker is able to execute arbitrary JavaScript code in a victim's browser due to improper sanitization of multimedia tags in music files, including m3u files. This is fixed in version 1.18.5...

CVE-2025-54299

creationtimestamp| type| source ---|---|--- 2025-07-28 20:03:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2f7ekod52h 2025-07-29 07:28:24+00:00| seen| https://bsky.app/profile/jensen.technology/post/3lv3lhbkzkz2h...

CVE-2025-54529

creationtimestamp| type| source ---|---|--- 2025-07-28 19:44:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2e4tpuhp2h...

CVE-2025-54532

creationtimestamp| type| source ---|---|--- 2025-07-28 19:37:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2dq5ojfp23...

CVE-2025-54418

creationtimestamp| type| source ---|---|--- 2025-07-28 16:59:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv22vtipl72j 2025-07-29 15:55:07+00:00| seen| https://bsky.app/profile/undercodenews.bsky.social/post/3lv4hrdekc72v 2025-07-30 07:40:38+00:00| seen|...

CVE-2025-38494

In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hidhwrawrequest hidhwrawrequest is actually useful to ensure the provided buffer and length are valid. Directly calling in the low level transport driver function bypassed those checks and allowed invalid...

CVE-2025-54569

creationtimestamp| type| source ---|---|--- 2025-07-28 15:24:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzvltflsz2o...

CVE-2025-53696

iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected...

CVE-2025-54369

creationtimestamp| type| source ---|---|--- 2025-07-28 13:59:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3luzque5p7k2y 2025-07-30 04:40:08+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3lv5sj6f27c2b...

CVE-2025-8266

creationtimestamp| type| source ---|---|--- 2025-07-28 13:47:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzq6ctqh32o 2026-02-11 09:38:10+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-8266.yaml 2026-04-03...

CVE-2025-38478

Technical details for CVE-2025-38478 are not publicly available in the provided documents. The initial report describes Linux kernel Comedi instruction data initialization issues; monitor for updates.