CVE-2025-9519

creationtimestamp| type| source ---|---|--- 2025-09-04 09:01:46+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxyrwbdckp2l...

Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability

...

CVE-2025-58357

creationtimestamp| type| source ---|---|--- 2025-09-04 01:32:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxxysrzz7m2m 2025-09-04 06:40:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxyk24apnx2o 2026-05-23 02:00:15+00:00| seen|...

PT-2025-35887

Name of the Vulnerable Software and Affected Versions: Android WLAN versions prior to 2025-09-05 on Google Pixel devices Description: A privilege escalation issue exists in the WLAN component of Android running on Google Pixel devices. This allows for unauthorized elevation of privileges...

PT-2025-35879

Name of the Vulnerable Software and Affected Versions: Android WLAN versions prior to 2025-09-05 on Google Pixel devices Description: A privilege escalation issue exists in the WLAN component of Android on Google Pixel devices. This allows for unauthorized access to system resources...

Ubuntu: Security Advisory (USN-7736-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-48539

creationtimestamp| type| source ---|---|--- 2025-09-03 22:25:26+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3lxxoddlkol22 2025-09-04 22:45:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly27xbiyqm2e 2025-09-05 21:01:08+00:00|...

CVE-2025-9927 projectworlds Travel Management System viewpackage.php sql injection

A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown function of the file /viewpackage.php. Such manipulation of the argument t1 leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might...

CVE-2025-9919

creationtimestamp| type| source ---|---|--- 2025-09-03 19:08:07+00:00| seen| https://gist.github.com/Darkcrai86/f634b0a56d0393cd03d272e09bd06850 2025-09-03 20:29:48+00:00| seen| https://gist.github.com/Darkcrai86/4e4711e67c721e4bb462225dfc22d8b0...

CVE-2025-20328

A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attacker with low privileges to conduct a cross-site scripting XSS attack against a user of the web-based interface. Cisco has addressed this vulnerability in the Cisco Webex Meetings...

PayPal users targeted in account profile scam

A co-worker forwarded this rather convincing PayPal scam to me. Thanks Elena. A highly sophisticated email scam is targeting PayPal users with the subject line of "Set up your account profile." We decided to see what the scammers are after. First thing to do is to look at the headers: The sender...

Improper Authentication

github.com/mattermost/mattermost-plugin-confluence is vulnerable to Improper Authentication. The vulnerability is due to missing enforcement of user authentication in the Mattermost instance, which allows an attacker to access subscription details through an unauthenticated API call to the GET...

Ubuntu: Security Advisory (USN-7726-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 5.0: Containerd PHSA-2025-5.0-0611

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0611. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-22419

In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

GHSA-G5QG-72QW-GW5V vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

CVE-2025-55372

creationtimestamp| type| source ---|---|--- 2025-09-02 19:16:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxutdw3n2i2r 2025-09-03 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxxjpv6jxc2p...

ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

Summary On the ESP-IDF platform, ESPHome's webserver authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correct value e.g., correct username with partial password. This allows access to webserver functionality...

USN-7729-1: KDE PIM vulnerabilities

Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that the KMail application of KDE PIM could be made to leak the plaintext of S/MIME encrypted emails when retrieving external content in emails. Und...

Poisoned at Scale: a Scalable Audit Uncovers Hidden Scam Endpoints in Production LLMs

Large Language Models LLMs have become critical to modern software development, but their reliance on internet datasets for training introduces a significant security risk: the absorption and reproduction of malicious content. To evaluate this threat, this paper introduces a scalable, automated...