Linux Distros Unpatched Vulnerability : CVE-2025-7783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files...

Rockwell Automation Arena

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

CVE-2025-51532

creationtimestamp| type| source ---|---|--- 2025-08-06 17:56:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvqsb5mojc2a...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

Django Error Reporting Data Compromise

The vulnerability of the Django web application framework is related to shortcomings in the error reporting mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality of the information being protected...

Unisite CMS security vulnerability

Unisite CMS is a content management system from the Russian company Unisite. A security vulnerability exists in Unisite CMS version 5.0, which stems from the presence of stored cross-site scripting in the reporting function that could lead to administrator session hijacking and remote code...

CVE-2025-30192

creationtimestamp| type| source ---|---|--- 2025-07-31 20:45:07+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvbyvq3vbc2c...

CVE-2025-38468

creationtimestamp| type| source ---|---|--- 2025-07-30 13:59:49+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lv6rryown22e...

Policy and Disclosure: 2025 Edition

Posted by Tim Willis, Google Project Zero In 2021, we updated our vulnerability disclosure policy to the current "90+30" model. Our goals were to drive faster yet thorough patch development, and improve patch adoption. While we’ve seen progress, a significant challenge remains: the time it takes...

CVE-2025-23278

creationtimestamp| type| source ---|---|--- 2025-07-25 03:34:10+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4iqa7jk2g 2025-08-02 20:17:46+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvgycns3d22j 2025-08-02 23:43:01+00:00| seen|...

Transcript Franking for Encrypted Messaging

Message franking is an indispensable abuse mitigation tool for end-to-end encrypted E2EE messaging platforms. With it, users who receive harmful content can securely report that content to platform moderators. However, while real-world deployments of reporting require the disclosure of multiple...

firefox: thunderbird: Incorrect URL stripping in CSP reports

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The username:password part is incorrectly stripped from URLs in CSP reports, potentially leaking HTTP Basic Authentication credentials...

CVE-2025-6054

creationtimestamp| type| source ---|---|--- 2025-07-23 06:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumfukppsr2i...

IBM Analytics Content Hub Information Disclosure

The vulnerability of the software for accessing analytics and planning tools in the IBM Analytics Content Hub is related to deficiencies in the reporting mechanism for errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

IBM Analytics Content Hub Information Disclosure

The vulnerability of the software for accessing analytics and planning tools in the IBM Analytics Content Hub is related to deficiencies in the reporting mechanism for errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential...

CVE-2025-51479

creationtimestamp| type| source ---|---|--- 2025-07-22 21:14:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulgdh7nd722...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

Crime Reporting System /headlogin.php File SQL Injection Vulnerability

Crime Reporting System is a crime reporting system. Crime Reporting System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /headlogin.php. An attacker can exploit this vulnerability to...

Crime Reporting System registration.php File SQL Injection Vulnerability

Crime Reporting System is a crime reporting system. Crime Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Name in the file /registration.php. An attacker can exploit this vulnerability to...

Online Fire Reporting System team-ontheway-requests.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter teamid in file /admin/team-ontheway-requests.php. An...