24939 matches found
SUSE CVE-2025-14876
A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service DoS on the host system by causing the QEMU process to terminate...
CVE-2025-66911
Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...
PT-2025-52551
Name of the Vulnerable Software and Affected Versions WP JobHunt plugin for WordPress versions prior to 7.8 Description The WP JobHunt plugin for WordPress is susceptible to unauthorized data modification. A missing capability check within the cs update application status callback function allows...
GHSA-V98V-FF95-F3CP
creationtimestamp| type| source ---|---|--- 2025-12-19 23:44:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115748886231994842 2025-12-22 17:17:07+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/n8n-security-advisory-av25-857 2025-12-23 22:47:55+00:00| seen|...
EUVD-2025-204539
Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...
CVE-2025-66911
Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...
CVE-2025-14940
creationtimestamp| type| source ---|---|--- 2025-12-19 14:21:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115746673133123865...
CVE-2025-56157
creationtimestamp| type| source ---|---|--- 2025-12-19 07:42:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115745104181415797 2025-12-19 16:41:46+00:00| seen| https://gist.github.com/gmh5225/56a03049c269e715bfc21a6b9fced8f0 2026-01-21 17:31:02+00:00| seen|...
CVE-2025-13999
creationtimestamp| type| source ---|---|--- 2025-12-19 07:40:37+00:00| seen| https://gist.github.com/Darkcrai86/4d561d59c1bfb133a6d9263b268e6c62 2025-12-19 08:06:37+00:00| seen| https://gist.github.com/Darkcrai86/f0fab3e04744271bf0b64d65a6f0809a...
SUSE CVE-2025-14422
GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
CVE-2025-66911
Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...
turms 安全漏洞
turms is an instant messaging engine from turms-im open source. A security vulnerability exists in turms v0.10.0-SNAPSHOT and prior versions, which stems from improper access control in the user online status query function and could lead to information disclosure...
CVE-2025-66911
Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...
CVE-2025-66911
Turms IM Server prior to 0.10.0-SNAPSHOT is affected by a broken access control vulnerability in the user online status query function. The handleQueryUserOnlineStatusesRequest() in UserServiceController.java lets any authenticated user query the online status, device information, and login times...
FastAPI SSO 安全漏洞
FastAPI SSO is a FastAPI plugin from the individual developer Tomas Votava. A security vulnerability exists in FastAPI SSO versions prior to 0.19.0, which stems from improper validation of the OAuth status parameter and could lead to a cross-site request forgery attack...
PT-2025-52448
Name of the Vulnerable Software and Affected Versions Turms IM Server versions prior to 0.10.0-SNAPSHOT Description The software contains a flaw in access control related to querying user online status. An authenticated user can access online status, device information, and login timestamps of an...
CVE-2025-66911
Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...
CVE-2025-64676
creationtimestamp| type| source ---|---|--- 2025-12-18 22:12:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115742865152336856 2026-01-06 17:06:07+00:00| seen| Telegram/NtgdGeZWqROuFZ2INFVIF7wbiZX6L2oMH79jCDcZlZLsnY...
CVE-2025-34441
AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations...