CVE-2025-25296 Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint

Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's /projects/upload-example endpoint allows injection of arbitrary HTML through a GET request with an appropriately crafted labelconfig query parameter. By crafting a specially formatted XML label config with...

GHSA-FGW4-V983-MGP8 vulnerabilities

Vulnerabilities for packages: gh...

CVE-2025-25295

creationtimestamp| type| source ---|---|--- 2025-02-14 17:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pdu7c5s2c 2025-02-14 18:44:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud6ferz2z 2025-02-14 19:57:02+00:00| seen|...

CVE-2025-26508

creationtimestamp| type| source ---|---|--- 2025-02-14 17:07:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114003336662622990 2025-02-14 17:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pewexa52e 2025-02-14 18:45:02+00:00| seen|...

CVE-2025-26157

creationtimestamp| type| source ---|---|--- 2025-02-14 16:45:01+00:00| seen| https://infosec.exchange/users/cve/statuses/114003247183040794 2025-02-14 17:16:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pel3htj2e 2025-02-14 18:45:07+00:00| seen|...

CVE-2025-25994

creationtimestamp| type| source ---|---|--- 2025-02-14 16:30:01+00:00| seen| https://infosec.exchange/users/cve/statuses/114003188179713907 2025-02-14 17:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pedwufy24 2025-02-14 18:45:01+00:00| seen|...

CVE-2025-25990

creationtimestamp| type| source ---|---|--- 2025-02-14 16:30:00+00:00| seen| https://infosec.exchange/users/cve/statuses/114003188144224178 2025-02-14 17:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pdzfgjf2k 2025-02-14 18:45:01+00:00| seen|...

CVE-2025-25745

creationtimestamp| type| source ---|---|--- 2025-02-14 16:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5lyyhvgd2e 2025-02-14 16:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114003261336817886 2025-02-14 19:35:00+00:00| seen|...

CVE-2025-0178

creationtimestamp| type| source ---|---|--- 2025-02-14 14:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5fc73ske24 2025-02-14 15:12:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4448 2025-02-14 16:39:53+00:00| seen|...

CVE-2025-24616

creationtimestamp| type| source ---|---|--- 2025-02-14 13:18:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2x2pzt2s 2025-02-14 15:45:34+00:00| seen| https://t.me/cvedetector/18092 2025-02-14 15:53:54+00:00| seen|...

CVE-2025-23790

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bztdooc2a 2025-02-14 14:53:49+00:00| seen| https://infosec.exchange/users/cve/statuses/114002809934155511...

CVE-2025-23766

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzdi4bj24 2025-02-14 14:38:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114002750863755132...

CVE-2025-23568

creationtimestamp| type| source ---|---|--- 2025-02-14 13:16:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bxyu2gn2d 2025-02-14 13:38:44+00:00| seen| https://infosec.exchange/users/cve/statuses/114002514642261872...

CVE-2025-23431

creationtimestamp| type| source ---|---|--- 2025-02-14 13:08:42+00:00| seen| https://infosec.exchange/users/cve/statuses/114002396537131156 2025-02-14 13:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bxjin3j2c...

CVE-2025-26791

creationtimestamp| type| source ---|---|--- 2025-02-14 08:23:00+00:00| seen| https://infosec.exchange/users/cve/statuses/114001273156390912 2025-02-14 09:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4uiunptn2a 2025-02-14 10:10:41+00:00|...

CVE-2025-26788

StrongKey FIDO Server before 4.15.1 treats a non-discoverable namedcredential flow as a discoverable transaction...

CVE-2025-1298

creationtimestamp| type| source ---|---|--- 2025-02-14 07:43:29+00:00| seen| https://infosec.exchange/users/cve/statuses/114001117790029337 2025-02-14 08:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4r6b2ajv2a 2025-02-14 10:09:25+00:00| seen|...

CVE-2024-36736

An issue in the oneflow.permute component of OneFlow-Inc. Oneflow v0.9.1 causes an incorrect calculation when the same dimension operation is performed...

CVE-2025-1053

Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and obtained from a Brocade SANnav supportsave. An attacker with privileged access to the Brocade SANnav database could use the encryption key to obtain passwords used by Brocade SANna...

CVE-2024-33221

An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...