CVE-2025-15177

creationtimestamp| type| source ---|---|--- 2025-12-29 08:44:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4h2dg6dg2x 2025-12-29 19:00:09+00:00| published-proof-of-concept| Telegram/C8kpFgm-gE9qBqqvI9uwUOw1teSIRFTW9tGA9d1b6SgGE...

Exploit for CVE-2025-60458

CVE-2025-60458 UxPlay 1.72 RTSP TEARDOWN Double Free Vulnera...

CVE-2025-60458

UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN request can trigger multiple calls to free on the same memory address, potentially causing a Denial of Service...

CVE-2025-60458

UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN request can trigger multiple calls to free on the same memory address, potentially causing a Denial of Service...

PT-2025-53726

UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN request can trigger multiple calls to free on the same memory address, potentially causing a Denial of Service...

UxPlay 安全漏洞

UxPlay is an AirPlay server software by antimof individual developers. A security vulnerability exists in UxPlay version 1.72, which stems from the presence of a double release for RTSP request processing, which could lead to a denial of service...

CVE-2025-15218

creationtimestamp| type| source ---|---|--- 2025-12-28 20:24:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115799061227900219 2025-12-30 06:13:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb6p33aorf2r...

MAL-2025-192947 Malicious code in crypo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3a0850548e71807fb514fcd1943f55f7c3bd6408086ff7a495d7df628a083db9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in crypo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3a0850548e71807fb514fcd1943f55f7c3bd6408086ff7a495d7df628a083db9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2024-44065

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter...

Toward Real-World IoT Security: Concept Drift-Resilient IoT Botnet Detection Via Latent Space Representation Learning and Alignment

Although AI-based models have achieved high accuracy in IoT threat detection, their deployment in enterprise environments is constrained by reliance on stationary datasets that fail to reflect the dynamic nature of real-world IoT NetFlow traffic, which is frequently affected by concept drift...

CVE-2025-36229

creationtimestamp| type| source ---|---|--- 2025-12-26 21:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mawaefr7on2x...

EUVD-2024-55363

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter...

CVE-2025-68943

A flaw was found in Gitea. This vulnerability allows for the inadvertent disclosure of users' login times. A remote attacker can exploit this by utilizing the lastlogintime explore/users sort order, leading to the exposure of sensitive user activity information. Mitigation Mitigation for this iss...

CVE-2024-44065

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter...

CVE-2025-64645

CVE-2025-64645 affects IBM Concert Software versions 1.0.0–2.1.0. The issue is a local privilege-escalation race condition caused by a symbolic-link contention, enabling a local user to escalate privileges. Remediation: upgrade to IBM Concert Software 2.2.0 per IBM remediation guidance. Other con...

CVE-2025-64645 Multiple Vulnerabilities in IBM Concert Software.

IBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race condition of a symbolic link...

CVE-2025-64645 Multiple Vulnerabilities in IBM Concert Software.

IBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race condition of a symbolic link...

Gitea inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order

Gitea before 1.21.8 inadvertently discloses users' login times by allowing for example the lastlogintime explore/users sort order...

CVE-2025-68939

creationtimestamp| type| source ---|---|--- 2025-12-26 05:08:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maujlui74e2g 2026-01-02 21:53:02+00:00| published-proof-of-concept| Telegram/79M2PUWRnDZFfaBX3deh-SQz72WULa4jlHjBh-ox2wjl5as...