CVE-2025-9650

creationtimestamp| type| source ---|---|--- 2025-08-29 17:29:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxkljenlng2n...

CVE-2025-39245

creationtimestamp| type| source ---|---|--- 2025-08-29 13:07:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115112203238902781 2025-09-04 21:41:55+00:00| seen| https://bsky.app/profile/undercodenews.bsky.social/post/3ly24fjkgpn2m...

CVE-2025-53508

CVE-2025-53508 affects iND Co.,Ltd embedded devices including HL330-DLS (MC7700/MC7330 variants), HL320-DLS, LM-100, LM-200 (AMP570/EC25-J variants), L2X Assist, L2X Assist-RS-A/E, F2L Assist-SS-A/E. Root cause is OS command injection allowing an arbitrary OS command to be executed, potentially l...

CVE-2025-53507

CVE-2025-53507 affects multiple iND Co.,Ltd products (e.g., HL330-DLS, HL320-DLS, LM-100/LM-200, L2X Assist(-RS-A), F2L Assist(-SS-A/E)) due to insecure storage of sensitive information, mainly configuration data such as admin passwords. Root cause: storing credentials insecurely within affected ...

PT-2025-35396

CVE-2025-58327 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-58327 Published : Aug. 29, 2025, 3:15 a.m. | 3 hours, 29 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

PT-2025-35184

Name of the Vulnerable Software and Affected Versions: iND Co.,Ltd products affected versions not specified Description: Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information issue. Exploitation may lead to the disclosure of configuration information, such...

Vulnerability eliminated

...

CVE-2025-9593 itsourcecode Apartment Management System unit_status_info.php sql injection

A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unitstatusinfo.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2025-9593

Affected software: itsourcecode Apartment Management System 1.0. The vulnerability is an SQL injection in the /report/unit_status_info.php file caused by unsafely handling the usid parameter. This allows remote exploitation and an exploit has been published. Connected advisories confirm the issue...

CVE-2025-9586

creationtimestamp| type| source ---|---|--- 2025-08-28 21:11:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108447341555170...

CVE-2025-9584

creationtimestamp| type| source ---|---|--- 2025-08-28 20:18:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108236769126304...

CVE-2025-6203

creationtimestamp| type| source ---|---|--- 2025-08-28 20:03:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108179538985792 2025-09-02 06:30:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lxtijqktdl25 2025-09-02 16:09:59+00:00| seen|...

CVE-2025-9576

creationtimestamp| type| source ---|---|--- 2025-08-28 18:24:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107787041182636...

CVE-2025-9575

creationtimestamp| type| source ---|---|--- 2025-08-28 18:24:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107787041182636...

CVE-2025-57218

creationtimestamp| type| source ---|---|--- 2025-08-28 17:56:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107678659351418...

Storing Passwords in a Recoverable Format

Overview org.xwiki.platform:xwiki-platform-export-pdf-api is an API for multipage PDF export that supports both client-side printing, using the user's web browser, and server-side printing, e.g. using a headless Chrome browser that may run inside a Docker container. Affected versions of this...

CVE-2025-55583

creationtimestamp| type| source ---|---|--- 2025-08-28 14:41:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115106911137398166 2026-08-26 11:00:29+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aff889aa-caa8-4230-873a-89e4247460ec 2026-08-27...

CVE-2025-54125

creationtimestamp| type| source ---|---|--- 2025-08-28 13:38:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-54125.yaml 2025-08-30 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxnhubciqr2b 2025-09-13...

CVE-2025-8067

creationtimestamp| type| source ---|---|--- 2025-08-28 13:23:28+00:00| seen| https://seclists.org/oss-sec/2025/q3/140 2025-08-28 15:00:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115106984983497798 2025-08-28 15:57:59+00:00| seen| https://seclists.org/oss-sec/2025/q3/143 2025-08-...

MAL-2025-41515 Malicious code in @twork-data-services/proxy-prime-api-v1-account-getting-services-status (npm)

--- -= Per source details. Do not edit below this line.=-...