CVE-2025-48484

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, the application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data in the conversation POST data body. This issue has been patched in versio...

CVE-2025-44905

creationtimestamp| type| source ---|---|--- 2025-05-30 03:52:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqedexv33352 2025-05-31 09:32:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhguwep7l2s...

CVE-2025-48068 Information exposure in Next.js dev server due to lack of origin verification

Next.js is a React framework for building full-stack web applications. In versions starting from 13.0 to before 14.2.30 and 15.0.0 to before 15.2.2, Next.js may have allowed limited source code exposure when the dev server was running with the App Router enabled. The vulnerability only affects...

CVE-2025-44619

creationtimestamp| type| source ---|---|--- 2025-05-30 02:41:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqe7gty3zr52 2025-05-30 06:16:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqeli3zngw2r 2026-07-06...

CVE-2024-12224

creationtimestamp| type| source ---|---|--- 2025-05-30 02:41:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqe7grq375t2 2025-05-30 06:01:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqeknad7p627 2025-09-12...

PT-2025-23358 · Undefined · Undefined

CVE-2025-48870 Rejected reason https://t.co/iWjC7gHSaV...

CVE-2025-44906

CVE-2025-44906 : jhead v3.08 contains a heap-use-after-free in the ProcessFile function (jhead.c), causing memory corruption. Public sources describe an application‑level issue upon processing crafted JPEG files; CVSSv3.1 base score is 7.8 (HIGH) with local access and user interaction required. T...

CVE-2025-44619

The CVE-2025-44619 entry concerns Tinxy WiFi Lock Controller v1 RF, which is reported to be configured to transmit on an open Wi‑Fi network. Root cause: device configured for unauthenticated network access. Impact: attackers could join the network without authentication, potentially leading to un...

Debian: Security Advisory (DLA-4191-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5331

creationtimestamp| type| source ---|---|--- 2025-05-29 22:35:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdropgwilq2...

CVE-2025-30466

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. A website may be able to bypass Same Origin Policy...

CVE-2025-41233

creationtimestamp| type| source ---|---|--- 2025-05-29 21:31:05+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lqdo3x7xps25 2025-06-12 22:34:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18236 2025-06-13 01:10:38+00:00| seen|...

CVE-2025-32752

creationtimestamp| type| source ---|---|--- 2025-05-29 20:05:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdjc62i3mw2 2025-06-04 10:59:48+00:00| seen| https://bsky.app/profile/amberwolfsec.bsky.social/post/3lqrnmnn3q22x 2025-06-04...

CVE-2025-5066 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-46701

Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1...

CVE-2025-48471

creationtimestamp| type| source ---|---|--- 2025-05-29 16:42:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqd5uffcie42 2025-05-29 18:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqddo5lnw22m...

CVE-2025-46570 vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel

vLLM is an inference and serving engine for large language models LLMs. Prior to version 0.9.0, when a new prompt is processed, if the PageAttention mechanism finds a matching prefix chunk, the prefill process speeds up, which is reflected in the TTFT Time to First Token. These timing differences...

CVE-2025-48475 FreeScout Vulnerable to Insufficient Authorization

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the System does not provide a check on which "clients" of the System an authorized user can view and edit, and which ones they cannot. As a result, an authorized user who does not have access to any of the...

CVE-2025-48474

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application incorrectly checks user access rights for conversations. Users with showonlyassignedconversations enabled can assign themselves to an arbitrary conversation from the mailbox to which they have...

CVE-2025-5321 aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation

A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component runview Object Handler. The manipulation of the argument Abfrage leads to erweiterte Rechte. The attack c...