PT-2025-29304 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The reported issue has been rejected as not used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2025-7370

Rejected reason: Upon investigtion upstream maintainers discovered this was not a real issue. See the references for more details. See: https://gitlab.gnome.org/GNOME/libsoup/-/issues/430note2494090...

PT-2025-29108 · Zoom Video Communications · Zoom Clients For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Clients for Windows affected versions not specified Description: A buffer overflow issue exists in certain Zoom Clients for Windows. This issue may allow an authorized user to cause a denial of service through network access...

PT-2025-28305 · Jhenggao · Ipublish System

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined, as the descriptions do not specify the software name and version. Description: The issue allows unauthenticated remote attackers to read arbitrary system files. Recommendations: At the moment, there is n...

BELL-CVE-2025-38200

Bulletin has no description...

BELL-CVE-2025-38124

Bulletin has no description...

BELL-CVE-2025-1220

Bulletin has no description...

CVE-2025-6926

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CGA-G44J-XMX9-X7G3

Bulletin has no description...

CVE-2025-6936

creationtimestamp| type| source ---|---|--- 2025-07-01 00:07:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19991 2025-07-01 00:30:06+00:00| seen| https://bsky.app/profile/potato.software/post/3lsugzj6nce2c 2025-07-01 04:20:20+00:00| seen|...

WordPress Free Downloads EDD plugin <= 1.0.4 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin Free Downloads EDD versions = 1.0.4...

BIT-GITLAB-2025-2443 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-6429

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an embed tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox 140, Firefox ESR...

CGA-7JQQ-QQV5-RH8M

Bulletin has no description...

BIT-PYTHON-2025-4516 Use-after-free in "unicode_escape" decoder with error handler

There is an issue in CPython when using bytes.decode"unicodeescape", error="ignore|replace". If you are not using the "unicodeescape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode call in ...

CVE-2025-6273 WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion

A vulnerability was found in WebAssembly wabt up to 1.0.37 and classified as problematic. This issue affects the function LogOpcode of the file src/binary-reader-objdump.cc. The manipulation leads to reachable assertion. Local access is required to approach this attack. The exploit has been...

BIT-MEDIAWIKI-2024-34507

An issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. XSS can occur because of mishandling of the 0x1b character, as demonstrated by Special:RecentChanges%1b0000000...

CVE-2022-50031

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

MAL-2025-5128 Malicious code in requestpacket (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-4754 Missing Session Revocation on Logout in ash_authentication_phoenix

Insufficient Session Expiration vulnerability in team-alembic ashauthenticationphoenix allows a session token captured before sign-out to remain usable afterwards. The default signout/2 that AshAuthentication.Phoenix.Controller injects into an application's auth controller only calls...