Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability

Cisco Unified Intelligence Center is a web-based reporting platform from Cisco that consolidates contact center data and provides visual reporting capabilities. An arbitrary file upload vulnerability exists in the Cisco Unified Intelligence Center web interface, which stems from a lack of file...

Online Fire Reporting System bwdates-report-result.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of the fromdate/todate parameter in the file /admin/bwdates-report-result.php for externally entered SQL statements...

CVE-2025-7903

creationtimestamp| type| source ---|---|--- 2025-07-20 20:35:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugdbbqe5j27 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:40+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-54316

An issue was discovered in Logpoint before 7.6.0. When creating reports, attackers can create custom Jinja templates that chained built-in filter functions to generate XSS payloads. These payloads can be rendered by the Logpoint Report Template engine, making it vulnerable to cross-site scripting...

CVE-2025-7896

creationtimestamp| type| source ---|---|--- 2025-07-20 16:56:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufwzems442o 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:40+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-46385

creationtimestamp| type| source ---|---|--- 2025-07-20 16:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufvvimar62o...

CVE-2025-7859

creationtimestamp| type| source ---|---|--- 2025-07-20 03:16:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luej5tlz7m2h...

CVE-2025-7861

creationtimestamp| type| source ---|---|--- 2025-07-20 02:56:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luehzwducc2h 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-26...

CVE-2025-7855

creationtimestamp| type| source ---|---|--- 2025-07-20 00:15:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lue73lobd32i 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:42+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-54316

An issue was discovered in Logpoint before 7.6.0. When creating reports, attackers can create custom Jinja templates that chained built-in filter functions to generate XSS payloads. These payloads can be rendered by the Logpoint Report Template engine, making it vulnerable to cross-site scripting...

CVE-2025-54316: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Logpoint before 7.6.0. When creating reports, attackers can create custom Jinja templates that chained built-in filter functions to generate XSS payloads. These payloads can be rendered by the Logpoint Report Template engine, making it vulnerable to cross-site scripting...

CVE-2025-54316

An issue was discovered in Logpoint before 7.6.0. When creating reports, attackers can create custom Jinja templates that chained built-in filter functions to generate XSS payloads. These payloads can be rendered by the Logpoint Report Template engine, making it vulnerable to cross-site scripting...

CVE-2025-54316

CVE-2025-54316 affects Logpoint prior to 7.6.0. A vulnerability in the Report Template engine allows an attacker to craft custom Jinja templates that chain built-in filter functions to generate XSS payloads , which can be rendered when creating reports. The CVE entry has a CVSS v3.1 base score of...

CVE-2023-20085

creationtimestamp| type| source ---|---|--- 2025-07-19 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ludubgs6is2z...

CVE-2025-7833

creationtimestamp| type| source ---|---|--- 2025-07-19 18:31:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludltxn7sc2b...

CVE-2025-7819

creationtimestamp| type| source ---|---|--- 2025-07-19 15:22:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludbcea5wk2i 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:42+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7815

creationtimestamp| type| source ---|---|--- 2025-07-19 12:51:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lucytfe5xv2j 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:42+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-52924

creationtimestamp| type| source ---|---|--- 2025-07-19 06:15:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luccqi7tl22i...

CVE-2025-7814

creationtimestamp| type| source ---|---|--- 2025-07-18 22:45:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lubjl67gzw2b...

GHSA-5662-CV6M-63WH melange's world-writable permissions expose SBOM files to potential image tampering

It was discovered that the SBOM files generated by melange in apks had file system permissions mode 666: $ apkrane ls https://packages.wolfi.dev/os/x8664/APKINDEX.tar.gz -P hello-wolfi --full --latest | xargs wget -q -O - | tar tzv 2/dev/null var/lib/db/sbom drwxr-xr-x root/root 0 2025-06-23 14:1...