CVE-2025-9919

creationtimestamp| type| source ---|---|--- 2025-09-03 19:08:07+00:00| seen| https://gist.github.com/Darkcrai86/f634b0a56d0393cd03d272e09bd06850 2025-09-03 20:29:48+00:00| seen| https://gist.github.com/Darkcrai86/4e4711e67c721e4bb462225dfc22d8b0...

CVE-2025-20328

A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attacker with low privileges to conduct a cross-site scripting XSS attack against a user of the web-based interface. Cisco has addressed this vulnerability in the Cisco Webex Meetings...

PayPal users targeted in account profile scam

A co-worker forwarded this rather convincing PayPal scam to me. Thanks Elena. A highly sophisticated email scam is targeting PayPal users with the subject line of "Set up your account profile." We decided to see what the scammers are after. First thing to do is to look at the headers: The sender...

Improper Authentication

github.com/mattermost/mattermost-plugin-confluence is vulnerable to Improper Authentication. The vulnerability is due to missing enforcement of user authentication in the Mattermost instance, which allows an attacker to access subscription details through an unauthenticated API call to the GET...

Photon OS 5.0: Containerd PHSA-2025-5.0-0611

An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0611. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Ubuntu: Security Advisory (USN-7726-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-22419

In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

GHSA-G5QG-72QW-GW5V vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

CVE-2025-55372

creationtimestamp| type| source ---|---|--- 2025-09-02 19:16:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxutdw3n2i2r 2025-09-03 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxxjpv6jxc2p...

ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

Summary On the ESP-IDF platform, ESPHome's webserver authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correct value e.g., correct username with partial password. This allows access to webserver functionality...

USN-7729-1: KDE PIM vulnerabilities

Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that the KMail application of KDE PIM could be made to leak the plaintext of S/MIME encrypted emails when retrieving external content in emails. Und...

Poisoned at Scale: a Scalable Audit Uncovers Hidden Scam Endpoints in Production LLMs

Large Language Models LLMs have become critical to modern software development, but their reliance on internet datasets for training introduces a significant security risk: the absorption and reproduction of malicious content. To evaluate this threat, this paper introduces a scalable, automated...

Linux Distros Unpatched Vulnerability : CVE-2025-2092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p29, 2.2.0p41 and =2.1.0p49 EOL causes remote site authentication secre...

Security Bulletin: NVIDIA Bluefield, ConnectX, DOCA, Mellanox DPDK, Cumulus Linux and NVOS - September 2025

NVIDIA has released a software update for NVIDIA Bluefield, ConnectX, DOCA, Mellanox DPDK, Cumulus Linux and NVOS. To protect your system, download and install the latest NVIDIA components from the links provided in this document. For earlier evaluation versions, contact your account manager to g...

xillen-exploit-dev

Xillen Exploit Dev Инструмент для разработки и тестирован...

MINI-H5Q5-5GJX-9X4R

Bulletin has no description...

Travelers to the UK targeted in ETA scams

Since January 8, 2025, travelers from most countries, including the US, Australia, and Canada have to apply for an Electronic Travel Authorisation ETA for visa free travel to the UK. You can apply for an Electronic Travel Authorisation using the ETA App, or via an online form. When you apply for ...

CVE-2025-9770

CVE-2025-9770 affects Campcodes Hospital Management System 1.0. The Admin Dashboard Login’s /admin/ backend is vulnerable via manipulation of the Password argument, causing SQL injection. This can be exploited remotely and, per sources, an exploit is publicly available. Connected documents confir...

CVE-2025-9754

creationtimestamp| type| source ---|---|--- 2025-09-01 05:15:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxqtudw3sf2v...

postgresql:15 security update

pgaudit 1.7.0-1 - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: 2128410 pgrepack 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 1.4.8-1 - Update to version 1.4.8 - Postgresql 15 is supported - Related: 212841...