FastAPI SSO security vulnerability

FastAPI SSO is a FastAPI plugin from the individual developer Tomas Votava. A security vulnerability exists in FastAPI SSO versions prior to 0.19.0, which stems from improper validation of the OAuth status parameter and could lead to a cross-site request forgery attack...

CVE-2025-64676

creationtimestamp| type| source ---|---|--- 2025-12-18 22:12:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115742865152336856 2026-01-06 17:06:07+00:00| seen| Telegram/NtgdGeZWqROuFZ2INFVIF7wbiZX6L2oMH79jCDcZlZLsnY...

CVE-2025-34441

AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations...

CVE-2025-63820

creationtimestamp| type| source ---|---|--- 2025-12-18 18:49:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115742065581136698...

CVE-2025-14738

creationtimestamp| type| source ---|---|--- 2025-12-18 18:20:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741950789308220 2025-12-18 20:07:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maby3gkidi22...

CVE-2025-14884

creationtimestamp| type| source ---|---|--- 2025-12-18 17:11:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741680425989274 2025-12-18 20:38:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabzswlucz2q 2026-01-07 21:06:47+00:00| seen|...

CVE-2025-63390

creationtimestamp| type| source ---|---|--- 2025-12-18 15:58:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741395287796408 2026-01-21 17:31:11+00:00| seen| https://gist.github.com/Cristliu/0897bceac5fdc2d945304b5087a84f14 2026-01-21 17:31:29+00:00| seen|...

CVE-2025-63391

creationtimestamp| type| source ---|---|--- 2025-12-18 15:31:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741286092781846 2026-01-21 17:31:13+00:00| seen| https://gist.github.com/Cristliu/889471313b3c698fff74d32b7717807c 2026-01-21 17:31:31+00:00| seen|...

CVE-2025-63389

creationtimestamp| type| source ---|---|--- 2025-12-18 15:29:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741280992694557 2026-01-21 17:31:09+00:00| seen| https://gist.github.com/Cristliu/b6f4d070fb27932f581be1aadc0923e7 2026-01-21 17:31:27+00:00| seen|...

GHSA-5CGR-J3JF-JW3V

creationtimestamp| type| source ---|---|--- 2025-12-18 14:34:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741064492295251 2026-04-14 17:27:49+00:00| seen| Telegram/X69Hoh64i7djUBejuAQijXCf66JncuFnYRKez2YtZF33U...

CVE-2025-64260

creationtimestamp| type| source ---|---|--- 2025-12-18 11:22:03+00:00| seen| https://gist.github.com/Darkcrai86/d480683c190767a2674ad9eb4625e5d7...

CVE-2025-60063

creationtimestamp| type| source ---|---|--- 2025-12-18 09:48:58+00:00| seen| https://gist.github.com/Darkcrai86/6710e1b91c5c3cbfa60d8db7ea906b68 2025-12-18 17:01:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabnokixh32m...

CVE-2025-60174

creationtimestamp| type| source ---|---|--- 2025-12-18 09:39:50+00:00| seen| https://gist.github.com/Darkcrai86/b120c4890bd6cd88029eeab830ccdebc...

CVE-2025-66054

creationtimestamp| type| source ---|---|--- 2025-12-18 09:23:20+00:00| seen| https://gist.github.com/Darkcrai86/8ad56b60e966058ee424cf6ab537e395 2025-12-18 09:30:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maauht7deq2q...

CVE-2025-67791

creationtimestamp| type| source ---|---|--- 2025-12-18 07:57:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115739500542473315...

Mozilla Thunderbird < 3.0.7

The version of Thunderbird installed on the remote Windows host is prior to 3.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory. - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before...

CVE-2025-14764

creationtimestamp| type| source ---|---|--- 2025-12-17 20:38:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115736831846545668...

CVE-2025-34441

AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations...

CVE-2025-34441

CVE-2025-34441 affects AVideo versions prior to 20.1, exposing emails, usernames, admin status, and last login times via an unauthenticated public API endpoint, enabling user enumeration/privacy violations. Connected sources also describe unauthenticated RCE paths in AVideo 14.3.1+ through notify...

EUVD-2025-203938

AVideo versions prior to 20.0 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations...