27233 matches found
CVE-2025-61813
creationtimestamp| type| source ---|---|--- 2025-12-10 01:18:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lvaudkdl2e 2025-12-10 13:40:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7n6pzrvlz2m...
CVE-2025-67500
Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 through 4.3.14, 4.4.0-beta.1 through 4.4.9, 4.5.0-beta.1 through 4.5.2 have discrepancies in error handling which allow checking whether a given status exists by sending a request...
CVE-2025-67505: Concurrent Execution using Shared Resource with Improper Synchronization
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another...
Microsoft Windows 10 22H2 ESU Status Check
Binary data wmiwin1022h2esustatus.nbin...
PT-2025-50332
Hi All, Looking at the Action1 reports, and unable to see anything which would be useful to for reporting from for the vulnerability of devices. I'm looking for an export with the data similar to the below DeviceName, CveId, Severity, CVSS, PatchAvailable, Product, OS, LastSeen PC-001,...
CVE-2025-67500 Mastodon Error Handling Discrepancy Enables Private Status Existence Enumeration
Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 through 4.3.14, 4.4.0-beta.1 through 4.4.9, 4.5.0-beta.1 through 4.5.2 have discrepancies in error handling which allow checking whether a given status exists by sending a request...
CVE-2025-67500
CVE-2025-67500 affects Mastodon prior to fixed versions: 4.2.28, 4.3.15, 4.4.10 and 4.5.3. The issue stems from error-handling discrepancies that let an attacker determine whether a private status exists by sending a request with a non-English Accept-Language header; it does not reveal the status...
CVE-2025-67500 Mastodon Error Handling Discrepancy Enables Private Status Existence Enumeration
Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 through 4.3.14, 4.4.0-beta.1 through 4.4.9, 4.5.0-beta.1 through 4.5.2 have discrepancies in error handling which allow checking whether a given status exists by sending a request...
CVE-2025-67500 Mastodon Error Handling Discrepancy Enables Private Status Existence Enumeration
Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 through 4.3.14, 4.4.0-beta.1 through 4.4.9, 4.5.0-beta.1 through 4.5.2 have discrepancies in error handling which allow checking whether a given status exists by sending a request...
GHSA-7WFC-4796-GMG5
creationtimestamp| type| source ---|---|--- 2025-12-09 22:20:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691935815250281...
EUVD-2025-202322
Cross Site Request Forgery CSRF vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to cause a denial of service via function handleinterfacePOSTandstatus...
GHSA-J76J-5P5G-9WFR
creationtimestamp| type| source ---|---|--- 2025-12-09 21:10:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691661138997900...
CVE-2025-65231
Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...
GHSA-HXJ9-33PP-J2CC
creationtimestamp| type| source ---|---|--- 2025-12-09 19:58:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691377688409077...
CVE-2025-65573
Cross Site Request Forgery CSRF vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to cause a denial of service via function handleinterfacePOSTandstatus...
CVE-2025-9368
creationtimestamp| type| source ---|---|--- 2025-12-09 19:12:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lasjo6yw2k...
EUVD-2023-60176
In the Linux kernel, the following vulnerability has been resolved: loop: loopsetstatusfrominfo check before assignment In loopsetstatusfrominfo, lo-looffset and lo-losizelimit should be checked before reassignment, because if an overflow error occurs, the original correct value will be changed t...
CVE-2025-34408
creationtimestamp| type| source ---|---|--- 2025-12-09 18:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691003669191782...