CVE-2025-51503

A Stored Cross-Site Scripting XSS vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript execution in admin browsers...

RLSA-2025:4043 Moderate: bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts Rocky Enterprise Software Foundation, and pcmcia configuration files. Security Fixes: BlueZ: Audio Profile AVRCP Improper Validation of Array Inde...

CVE-2023-2533

creationtimestamp| type| source ---|---|--- 2025-07-28 15:00:30+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3luzuaqymgn2e 2025-07-28 16:07:00+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3luzxxo34xw2d 2025-07-29 02:51:00+00:00| seen|...

CVE-2025-26469

creationtimestamp| type| source ---|---|--- 2025-07-28 13:56:19+00:00| seen| https://bsky.app/profile/potato.software/post/3luzqnz3jio2m 2025-07-28 15:37:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3luzwc47lt52v...

CVE-2025-54296

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

Infinite loop

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Malicious code in webxr-input-profiles (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6325 Malicious code in webxr-input-profiles (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-54090

creationtimestamp| type| source ---|---|--- 2025-07-23 19:23:32+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lunqmetiv225 2025-07-24 00:10:05+00:00| seen| https://bsky.app/profile/lobsters-feed.bsky.social/post/3luoamu363o2j 2025-07-24 05:30:09+00:00| seen|...

CVE-2025-54296

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-54296 Extension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-54296

A stored Cross‑Site Scripting (XSS) vulnerability exists in the ProFiles component for Joomla, affecting versions 1.0 through 1.5.0. The issue is described in multiple sources (notably PT-2025-30569 and CVE records) as allowing injection/storage of scripts within the application. The connected do...

CVE-2025-54296 Extension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-24006

creationtimestamp| type| source ---|---|--- 2025-07-08 07:08:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816354360150951 2025-07-08 07:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgql3inq6b2...

CVE-2025-53109

creationtimestamp| type| source ---|---|--- 2025-07-02 16:56:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyolnrp7y2m 2025-07-02 17:43:18+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lsyr7wntms26 2025-07-02 18:24:31+00:00| seen|...

CVE-2025-6463

creationtimestamp| type| source ---|---|--- 2025-07-02 08:22:13+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lsxrqhqvcku2 2025-07-02 09:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxwphgtsn2s 2025-07-02 11:41:26+00:0...

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...

CVE-2024-8419

creationtimestamp| type| source ---|---|--- 2025-06-30 10:07:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19919 2025-06-30 10:29:36+00:00| seen| https://infosec.exchange/users/certvde/statuses/114771845197214791 2025-06-30 10:29:43+00:00| seen|...

CVE-2025-6425

An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12,...

CVE-2025-3090

creationtimestamp| type| source ---|---|--- 2025-06-24 08:15:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/114737343640310100 2025-06-24 08:16:10+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lsdns4hibhy2 2025-06-24 08:16:20+00:00| seen|...