CVE-2025-7594

creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:38+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2025-7635

creationtimestamp| type| source ---|---|--- 2025-09-09 20:35:50+00:00| seen| Telegram/rqS1ixXVcRQmnt7wqvJBXQb41InuF4vupuKr4bRBWLgKkyI...

CVE-2025-34174 Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting

In pfSense CE /usr/local/www/statustraffictotals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the default value to be displayed to all use...

CVE-2025-34174 Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting

In pfSense CE /usr/local/www/statustraffictotals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the default value to be displayed to all use...

CVE-2025-34174 Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting

In pfSense CE /usr/local/www/statustraffictotals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the default value to be displayed to all use...

CVE-2025-34174

The CVE affects pfSense CE in the Status Traffic Totals feature: /usr/local/www/status_traffic_totals.php processes the start-day parameter. The parameter is not validated as numeric nor sanitized for HTML, allowing the value to be saved as the default display for all users, which triggers stored...

CVE-2025-53802

creationtimestamp| type| source ---|---|--- 2025-09-09 16:22:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0277 2025-09-09 17:06:15+00:00| seen| https://www.thezdi.com/blog/2025/9/9/the-september-2025-security-update-review...

CVE-2025-54106

creationtimestamp| type| source ---|---|--- 2025-09-09 16:22:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0277 2025-09-09 17:06:15+00:00| seen| https://www.thezdi.com/blog/2025/9/9/the-september-2025-security-update-review 2025-09-18 21:02:28+00:00| seen|...

CVE-2025-54112

creationtimestamp| type| source ---|---|--- 2025-09-09 16:22:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0277 2025-09-09 17:06:15+00:00| seen| https://www.thezdi.com/blog/2025/9/9/the-september-2025-security-update-review...

CVE-2025-55146

creationtimestamp| type| source ---|---|--- 2025-09-09 15:31:52+00:00| seen| Telegram/KUdDyFGBs0jNh3z0ZQCqHLAsAkDPc0E2zRTCS9WVAYPgo...

CVE-2025-59017

creationtimestamp| type| source ---|---|--- 2025-09-09 11:17:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyfltkslbg2h...

CVE-2025-59015

creationtimestamp| type| source ---|---|--- 2025-09-09 11:04:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyfl47t4562h...

CVE-2025-10109

creationtimestamp| type| source ---|---|--- 2025-09-09 10:14:27+00:00| seen| https://gist.github.com/Darkcrai86/fd2fe6ea20ccb37f56e3bdc9b171c8e7...

CVE-2025-10116

creationtimestamp| type| source ---|---|--- 2025-09-09 10:11:51+00:00| seen| https://gist.github.com/Darkcrai86/8a3c4189d9a11dff41941bcaa6d81af9...

CVE-2025-9364

creationtimestamp| type| source ---|---|--- 2025-09-09 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-252-08 2025-09-09 15:18:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyfzcidifc2l 2025-09-09 20:02:51+00:00| seen|...

Liferay Portal exposes 500 status when attempting login with a deleted client secret

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19 exposes "Internal Server Error" in the response body when a...

CVE-2025-34174: Improper Neutralization of Input During Web Page Generation

In pfSense CE /usr/local/www/statustraffictotals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the default value to be displayed to all use...

PT-2025-36941

Name of the Vulnerable Software and Affected Versions: pfSense CE affected versions not specified Description: The start-day parameter in /usr/local/www/status traffic totals.php does not undergo proper validation to ensure it is a numeric value or sanitized of HTML-related characters before bein...

CVE-2025-58365

creationtimestamp| type| source ---|---|--- 2025-09-08 23:09:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyed5j5s7c2a...

CVE-2025-58445

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...