CVE-2025-12980

creationtimestamp| type| source ---|---|--- 2025-12-21 03:03:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/115755332944719218 2025-12-21 03:03:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mahqb3pva22y 2025-12-21 05:21:34+00:00| seen|...

CVE-2025-14180

creationtimestamp| type| source ---|---|--- 2025-12-20 02:01:21+00:00| seen| https://bsky.app/profile/slackers.it/post/3maf4czwhdn26 2025-12-20 02:01:33+00:00| seen| https://bsky.app/profile/slackers.it/post/3maf4d6dt3p2l 2025-12-21 11:53:36+00:00| seen|...

Cross-site Scripting (XSS)

Overview @tutao/tutanota-utils is a This is a collection of common utils we use across multiple projects/modules internally. As creating this module really is just an intermediate step towards re-organising some of the dependency structure of our software, it is most likely going to change Affect...

Tuta Mail has DOM attribute and CSS injection in its Contact Viewer feature

Impact Users importing contacts from untrusted sources. Specifically crafted contact data can lead to some of DOM modifications for the link button next to the field e.g. the link address can be overriden. CSS can be manipulated to give the button arbitrary look and change it's size so that any...

CVE-2025-14946

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier URI. This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell SSH process,...

CVE-2025-14847

creationtimestamp| type| source ---|---|--- 2025-12-19 12:00:19+00:00| seen| https://gist.github.com/Darkcrai86/4146f75f6c0ffb7732c642774dd0638a 2025-12-19 12:26:53+00:00| seen| https://gist.github.com/Darkcrai86/79c4d85e9947c9cbadcb5682e0de0e26 2025-12-19 15:40:19+00:00| seen|...

CVE-2025-14151

creationtimestamp| type| source ---|---|--- 2025-12-19 09:35:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3madfaznfoe2m 2025-12-19 09:36:06+00:00| seen| https://gist.github.com/Darkcrai86/7ab050f1e748cd1d0a529a46c0de364d 2025-12-19 10:36:11+00:00| seen|...

CVE-2025-34451

A flaw was found in proxychains-ng. An attacker can exploit a stack-based buffer overflow vulnerability in the proxyfromstring function by providing crafted proxy configuration entries containing overly long username or password fields. This can lead to memory corruption or application crashes,...

CVE-2025-14733

creationtimestamp| type| source ---|---|--- 2025-12-19 01:35:52+00:00| seen| https://infosec.exchange/users/offseq/statuses/115743663755552892 2025-12-19 01:35:53+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mackgko76e2g 2025-12-19 08:02:37+00:00| exploited|...

CVE-2025-64235

creationtimestamp| type| source ---|---|--- 2025-12-18 19:31:11+00:00| seen| https://gist.github.com/Darkcrai86/99d8c41d609f92edf355938664d3c06e 2025-12-18 19:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabwbxdylp2o...

CVE-2025-14739

creationtimestamp| type| source ---|---|--- 2025-12-18 18:28:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741984442971069 2025-12-18 19:52:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabxalbnvb22...

CVE-2025-6324

creationtimestamp| type| source ---|---|--- 2025-12-18 09:38:12+00:00| seen| https://gist.github.com/Darkcrai86/b2e31d3077b06b46861546ce9c4ac856 2025-12-18 09:59:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maaw4tgmgc2x...

CVE-2025-64371

creationtimestamp| type| source ---|---|--- 2025-12-18 09:26:42+00:00| seen| https://gist.github.com/Darkcrai86/ef6ee82ad15d64b1f97e57ae569cd6cf 2025-12-18 10:57:20+00:00| seen| https://gist.github.com/Darkcrai86/3aa71eeca6e6d567384ccc6041062ce6...

CVE-2025-66078

creationtimestamp| type| source ---|---|--- 2025-12-18 09:04:17+00:00| seen| https://infosec.exchange/users/offseq/statuses/115739764726607735 2025-12-18 09:04:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3maaszifayo27 2025-12-18 09:27:54+00:00| seen|...

CVE-2025-65857

creationtimestamp| type| source ---|---|--- 2025-12-17 21:00:04+00:00| published-proof-of-concept| Telegram/LegeDtMxRTlSxU-E4vRWPyR6r8eVZBSkTQd0bvp4AR24yPQ 2025-12-22 21:56:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115765449189016949 2025-12-22 23:13:53+00:00| seen|...

openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand

A flaw was found in OpenSSH where control characters in usernames were not properly validated when sourced from untrusted inputs like the command line or configuration expansion. If a ProxyCommand is used, these control characters could modify command behavior, potentially leading to code executi...

openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand

A flaw was found in OpenSSH where control characters in usernames were not properly validated when sourced from untrusted inputs like the command line or configuration expansion. If a ProxyCommand is used, these control characters could modify command behavior, potentially leading to code executi...

openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand

A flaw was found in OpenSSH where control characters in usernames were not properly validated when sourced from untrusted inputs like the command line or configuration expansion. If a ProxyCommand is used, these control characters could modify command behavior, potentially leading to code executi...

CVE-2025-14101

creationtimestamp| type| source ---|---|--- 2025-12-17 09:34:19+00:00| seen| https://infosec.exchange/users/offseq/statuses/115734220437192830 2025-12-17 09:34:20+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ma6eaa6sr62j 2025-12-17 11:36:49+00:00| seen|...

CVE-2025-12496

creationtimestamp| type| source ---|---|--- 2025-12-17 09:26:11+00:00| seen| https://gist.github.com/Darkcrai86/802126fdde1faa376368cd1984058151 2025-12-17 09:44:32+00:00| seen| https://gist.github.com/Darkcrai86/3924909376773238a8af14dc9699cf6b 2025-12-17 11:31:48+00:00| seen|...