CVE-2025-53025

The CVE-2025-53025 entry refers to Oracle VM VirtualBox (Core) with affected version 7.1.10. The vulnerability permits a high-privileges attacker who can log on to the infrastructure running VirtualBox to compromise the product, with potential impact including unauthorized access to critical data...

CVE-2025-53023

CVE-2025-53023 is a MySQL Server vulnerability in the replication component. Affected are MySQL 8.0.0–8.0.42. The issue allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequent crash (DOS) of MySQL Server. The CVSS v3.1 base score is 4.9 (Availabi...

CVE-2025-50103

...

CVE-2025-50087

...

CVE-2025-50072

...

CVE-2025-50069

...

CVE-2025-50068

CVE-2025-50068 is applicable to Oracle MySQL Cluster (Cluster: General). Affected are MySQL Cluster versions 8.0.0–8.0.42, 8.4.0–8.4.5, and 9.0.0–9.3.0. The vulnerability is described as easily exploitable with a high-privileged attacker who can log on to the infrastructure where MySQL Cluster ru...

CVE-2025-30754

CVE-2025-30754 affects Oracle Java SE and Oracle GraalVM (JSSE) with multiple affected versions across Java SE and GraalVM variants. Affected: Java SE 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; GraalVM for JDK 17.0.15, 21.0.7, 24.0.1; GraalVM Enterprise Edition 21.3.14. The vulnerabilit...

CVE-2025-6243

creationtimestamp| type| source ---|---|--- 2025-07-08 19:55:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114819367034333588 2025-07-09 16:15:58+00:00| seen| https://t.me/truesecator/7211 2025-07-14 06:04:37+00:00| seen|...

CVE-2025-53416

CVE-2025-53416 affects Delta Electronics DTN Soft via deserialization of untrusted data in the DTN Soft project file parsing, enabling remote code execution. The vulnerability is described as an insecure/deserialization flaw in handling project files, with an impact described as remote code execu...

CVE-2024-10534

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS allows Traffic Injection. This issue affects Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS: before 2024...

CVE-2023-24709

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters...

CVE-2025-30735

CVE-2025-30735 affects Oracle PeopleSoft Enterprise CC Common Application Objects, component: Page and Field Configuration, version 9.2. The vulnerability exists when exposed over HTTP via a network, allowing a low-privileged attacker to perform unauthorized create, delete, or modify actions on c...

CVE-2025-30716

...

CVE-2025-30695

...

CVE-2025-30691

...

CVE-2024-12580

A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The parameters sessionId, fileId, userId, and fileid in the /code/download/:sessionId/:fileId and /download/:userId/:fileid APIs are not validated or filtered, leading to potential log injection...

CVE-2024-12580 Logs Debug Injection in danny-avila/librechat

A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The parameters sessionId, fileId, userId, and fileid in the /code/download/:sessionId/:fileId and /download/:userId/:fileid APIs are not validated or filtered, leading to potential log injection...

GHSA-RVRW-7G3W-4QJW vulnerabilities

Vulnerabilities for packages: mysql...

Defeating Future Threats Starts Today

Welcome to this week's edition of the Threat Source newsletter. You don't need me to tell you that security is constantly changing and that more change is on its way. The enthusiastic adoption of new AI systems will inevitably lead to more demands on cybersecurity teams. Not only will these syste...