85469 matches found
📄 Django 5.1.13 SQL Injection
Django version 5.1.13 remote SQL injection vulnerability scanning script. ============================================================================================================================================= | Title : Django 5.1.13 SQL Injection Scanner | | Author : indoushka | | Tested o...
CVE-2025-40280
In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcmonreinitself. syzbot reported use-after-free of tipcnetnet-monitors in tipcmonreinitself. 0 The array is protected by RTNL, but tipcmonreinitself iterates over it without RTNL. tipcmonreinitself i...
CVE-2025-14195
creationtimestamp| type| source ---|---|--- 2025-12-07 19:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7gaua6bn32w...
Exploit for Deserialization of Untrusted Data in Facebook React
🛡️ GitHub Vulnerability Scanner for CVE-2025-55182 React/Next...
unified_scanner-SQL-LFI.XSS.IDOR-etc.-
unifiedscanner-SQL-LFI.XSS.IDOR-etc.- Key Improvements in...
[SECURITY] Fedora 42 Update: abrt-2.17.8-1.fc42
abrt is a tool to help users to detect defects in applications and to create a bug report with all information needed by maintainer to fix it. It uses plugin system to extend its functionality...
Arbitrary Code Execution in NLTK StanfordSegmenter via untrusted JAR loading
Description nltk.tokenize.StanfordSegmenter dynamically loads external Java .jar files without verification or sandboxing. If an attacker can supply or replace the JAR e.g., a poisoned model download, MITM package swap, or dependency poisoning, arbitrary Java bytecode executes at import time...
GHSA-VWXF-55XH-P3XF vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
GHSA-2JCR-4R89-72R6 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
CVE-2025-13360
creationtimestamp| type| source ---|---|--- 2025-12-05 09:24:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7a64alhdh2w...
OSV-2025-970 Heap-buffer-overflow in check_sync_pes
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=465802762 Crash type: Heap-buffer-overflow READ Crash state: checksyncpes Demux demuxprocessstream...
‘Signalgate’ Inspector General Report Wants Just One Change to Avoid a Repeat Debacle
The United States Inspector General report reviewing Secretary of Defense Pete Hegseth’s text messaging mess recommends a single change to keep classified material secure...
Cisco Unified Intelligence Center Unauthorized Access
The vulnerability of the software interface for creating Cisco Unified Intelligence Center reports is related to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential information...
Enjin: Unauthenticated GraphQL access by prepending __schema to private operations
A security vulnerability was identified in the GraphQL schema of the Enjin Platform. The vulnerability allowed unauthorized access to the GraphQL schema by prepending "schema" to private operations. The vulnerability was discovered and reported by a security researcher. The specific location of t...
CVE-2025-40223 most: usb: Fix use-after-free in hdm_disconnect
In the Linux kernel, the following vulnerability has been resolved: most: usb: Fix use-after-free in hdmdisconnect hdmdisconnect calls mostderegisterinterface, which eventually unregisters the MOST interface device with deviceunregisteriface-dev. If that drops the last reference, the device core...
CVE-2025-62173
creationtimestamp| type| source ---|---|--- 2025-12-04 00:54:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m74r4elnsk2n...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly cleaning up the IPcomp tunnel state, which could lead to a memory leak...
CVE-2025-20383
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "power" Splunk roles and subscribes to mobile push notifications could receive...
CVE-2025-20383
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "power" Splunk roles and subscribes to mobile push notifications could receive...
CVE-2025-20383 Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "power" Splunk roles and subscribes to mobile push notifications could receive...