CVE-2025-64064

CVE-2025-64064 affects Primakon Pi Portal 1.0.18 via the /api/v2/pp_users endpoint. A PATCH request that modifies PP_SECURITY_PROFILE_ID can bypass permissions checks, allowing a low-privilege user to elevate to Administrator. Core issue is weak access control around the PP_SECURITY_PROFILE_ID pa...

EUVD-2019-1106

Malware in sbrugna...

EUVD-2021-10118

Malware in sbrugna...

EUVD-2016-6913

Malware in sbrugna...

EUVD-2020-20217

Malware in sbrugna...

EUVD-2025-24640

Malicious code in bioql PyPI...

EUVD-2022-37307

Malicious code in bioql PyPI...

CVE-2025-59589

creationtimestamp| type| source ---|---|--- 2025-09-22 22:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzhgt3ippg2g...

CVE-2025-53771

creationtimestamp| type| source ---|---|--- 2025-07-20 06:03:24+00:00| seen| https://vulnerability.circl.lu/bundle/7eb6b389-20dd-404f-90c4-314ed370fcc5 2025-07-21 02:16:35+00:00| seen| https://bsky.app/profile/threatintel.microsoft.com/post/3lugwccoukc2q 2025-07-21 02:31:17+00:00| seen|...

CVE-2025-41668

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...

CVE-2025-41668

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...

CVE-2025-41668 Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...

CVE-2025-41668 Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...

CVE-2025-53384

creationtimestamp| type| source ---|---|--- 2025-06-28 05:06:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnf2yvt6v2a...

CVE-2025-5106

creationtimestamp| type| source ---|---|--- 2025-05-23 16:15:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptzobiysv2w...

CVE-2022-34352

IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. IBM X-Force ID: 230403...

CVE-2022-34351

IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402...

CVE-2021-23000

On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server, in rare instances, a specific sequence of malicious requests may...

CVE-2025-5050

creationtimestamp| type| source ---|---|--- 2025-05-21 22:14:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppmrnyftj2s...

CVE-2025-4632

creationtimestamp| type| source ---|---|--- 2025-05-13 06:30:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16080 2025-05-13 06:47:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lozvazwfdb2e 2025-05-13 09:41:16+00:00| seen| https://t.me/cvedetector/25168 2025-05-13...