CVE-2025-14955

creationtimestamp| type| source ---|---|--- 2025-12-20 04:36:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115750034748201822...

CVE-2025-14952

creationtimestamp| type| source ---|---|--- 2025-12-20 04:36:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115750034696710607...

CVE-2025-13329

creationtimestamp| type| source ---|---|--- 2025-12-20 04:04:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/115749910664280235 2025-12-20 06:57:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mafmtpkrxo2q 2025-12-20 10:31:27+00:00| seen|...

SUSE CVE-2025-14876

A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service DoS on the host system by causing the QEMU process to terminate...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-7782: Missing Authorization

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'csupdateapplicationstatuscallback' function in all versions up to, and including, 7.7. This makes it possible for authenticated attackers,...

PT-2025-52551

Name of the Vulnerable Software and Affected Versions WP JobHunt plugin for WordPress versions prior to 7.8 Description The WP JobHunt plugin for WordPress is susceptible to unauthorized data modification. A missing capability check within the cs update application status callback function allows...

GHSA-V98V-FF95-F3CP

creationtimestamp| type| source ---|---|--- 2025-12-19 23:44:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115748886231994842 2025-12-22 17:17:07+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/n8n-security-advisory-av25-857 2025-12-23 22:47:55+00:00| seen|...

EUVD-2025-204539

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-14940

creationtimestamp| type| source ---|---|--- 2025-12-19 14:21:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115746673133123865...

CVE-2025-56157

creationtimestamp| type| source ---|---|--- 2025-12-19 07:42:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115745104181415797 2025-12-19 16:41:46+00:00| seen| https://gist.github.com/gmh5225/56a03049c269e715bfc21a6b9fced8f0 2026-01-21 17:31:02+00:00| seen|...

CVE-2025-13999

creationtimestamp| type| source ---|---|--- 2025-12-19 07:40:37+00:00| seen| https://gist.github.com/Darkcrai86/4d561d59c1bfb133a6d9263b268e6c62 2025-12-19 08:06:37+00:00| seen| https://gist.github.com/Darkcrai86/f0fab3e04744271bf0b64d65a6f0809a...

SUSE CVE-2025-14422

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

Turms security vulnerabilities

turms is an instant messaging engine from turms-im open source. A security vulnerability exists in turms v0.10.0-SNAPSHOT and prior versions, which stems from improper access control in the user online status query function and could lead to information disclosure...

CVE-2025-66911

Turms IM Server versions v0.10.0-SNAPSHOT and earlier are susceptible to a broken access control vulnerability within the user online status query functionality. The root cause is located in the handleQueryUserOnlineStatusesRequest() method of UserServiceController.java, which fails to perform pr...

PT-2025-52448

Name of the Vulnerable Software and Affected Versions Turms IM Server versions prior to 0.10.0-SNAPSHOT Description The software contains a flaw in access control related to querying user online status. An authenticated user can access online status, device information, and login timestamps of an...