GHSA-XV57-4MR9-WG8V Next.js Content Injection Vulnerability for Image Optimization

A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious...

PT-2025-35326

Name of the Vulnerable Software and Affected Versions: Next.js versions prior to 14.2.31 Next.js versions 15.0.0 through 15.4.5 Description: Next.js Image Optimization is susceptible to content injection. Attackers controlling external image sources can trigger file downloads with arbitrary conte...

RHSA-2024:3467

creationtimestamp| type| source ---|---|--- 2025-08-27 13:18:18+00:00| seen| Telegram/UAejBj98RzShpsNkXUUt6fObsqMDpRdGyfFwVPtg8w8Sx0w 2025-08-27 13:18:19+00:00| seen| Telegram/RZsgBjEKFpqvyCP045mGfeIhNqahv01cUbn8KU7bsiulOCE 2025-08-30 15:22:53+00:00| seen|...

RHSA-2023:7700

creationtimestamp| type| source ---|---|--- 2025-08-27 12:17:56+00:00| seen| Telegram/l0CSYy6kMdLDJ0OBY7w38SDlt5uY1gAfLLEjxRA0vwYL4 2025-10-10 00:08:56+00:00| seen| Telegram/7haXfDPs-a5ycsXOHXTQSz80Y7lryvikaVGG0VkGdUPhXI...

CVE-2025-2313

creationtimestamp| type| source ---|---|--- 2025-08-27 11:17:18+00:00| seen| Telegram/JzqS30rbsZkXX-J9q-FpBkOr8wylmkM98sbVjWjXhrVNsA 2025-08-27 11:17:20+00:00| seen| Telegram/ssOidBomCKbG8sjcbyELy9TqieNAw9NmIvZVU6qSPqCeW2g 2025-08-27 11:17:24+00:00| seen|...

CVE-2025-30038 Session ID leakage in Zone.Identifier of downloaded files

The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security feature that stores additional metadata in an NTFS alternate data stream ADS for all files downloaded from potentially untrusted sources...

CVE-2025-30038 Session ID leakage in Zone.Identifier of downloaded files

The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security feature that stores additional metadata in an NTFS alternate data stream ADS for all files downloaded from potentially untrusted sources...

Linux Distros Unpatched Vulnerability : CVE-2023-39514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2023-39515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2023-39512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2020-7106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti 1.2.8 has stored XSS in datasources.php, colortemplatesitem.php, graphs.php, graphitems.php, lib/apiautomation.php, useradmin.php, and usergroupadmin.php,...

Linux Distros Unpatched Vulnerability : CVE-2023-39366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2020-13817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service daemon exit or system time change by predicting transm...

CVE-2025-7775

creationtimestamp| type| source ---|---|--- 2025-08-26 11:58:03+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0268 2025-08-26 12:04:41+00:00| seen| https://www.cert.at/de/warnungen/2025/8/citrix-netscaler-adc-schwachstellen-cve-2025-7775 2025-08-26 12:28:36+00:00| seen|...

CVE-2025-53118

creationtimestamp| type| source ---|---|--- 2025-08-26 00:30:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbb5xqqt52p 2025-08-26 01:31:58+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxbelocjnp22 2025-08-28 10:29:39+00:00| confirmed|...

CVE-2025-8627

creationtimestamp| type| source ---|---|--- 2025-08-25 22:00:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115091649506922253 2025-08-26 01:44:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbfbt7ek52p...

CVE-2025-52930

creationtimestamp| type| source ---|---|--- 2025-08-25 20:00:07+00:00| seen| https://infosec.place/objects/01c7c6e8-b7a4-4c90-9e35-e56456850cab 2025-08-26 00:24:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbasmm44i27...

CVE-2025-53085

creationtimestamp| type| source ---|---|--- 2025-08-25 18:30:14+00:00| seen| https://infosec.place/objects/de54d7bd-1d09-48f4-8166-de141cb2e764 2025-08-26 00:58:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbcq6a24a22...

CVE-2025-52456

creationtimestamp| type| source ---|---|--- 2025-08-25 15:13:27+00:00| seen| https://bsky.app/profile/potato.software/post/3lxabzpj77e2t 2025-08-26 06:00:06+00:00| seen| https://infosec.place/objects/10286d20-ea98-489d-8e55-820dca10e508...

CVE-2025-54480

creationtimestamp| type| source ---|---|--- 2025-08-25 14:15:14+00:00| seen| https://bsky.app/profile/potato.software/post/3lxa6rlulrr2z 2025-08-25 17:22:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxajakblc42z 2025-08-26 06:00:33+00:00| seen|...