GO-2026-4295 Mattermost Server exposes sensitive user status information via REST API version 4 endpoint in github.com/mattermost/mattermost-server

Mattermost Server exposes sensitive user status information via REST API version 4 endpoint in github.com/mattermost/mattermost-server...

CVE-2020-12472

MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...

GHSA-JC3F-C62G-V7QW

creationtimestamp| type| source ---|---|--- 2026-01-07 17:39:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115855036756832399...

CVE-2020-36905

creationtimestamp| type| source ---|---|--- 2026-01-06 16:10:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849026353201544 2026-01-06 16:37:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbrf7a6mfw2y 2026-01-07 21:03:03+00:00| seen|...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-56083

creationtimestamp| type| source ---|---|--- 2025-12-11 18:33:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702365711663519...

GHSA-4C65-9GQF-4W8H

creationtimestamp| type| source ---|---|--- 2025-12-11 17:18:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702072250790374...

CVE-2025-13809

creationtimestamp| type| source ---|---|--- 2025-12-01 06:04:16+00:00| seen| https://infosec.exchange/users/offseq/statuses/115642797535662438...

GHSA-JHJX-X4CF-4VM8

creationtimestamp| type| source ---|---|--- 2025-11-04 21:45:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115493614774031888...

GHSA-2RRC-F24F-94F6

creationtimestamp| type| source ---|---|--- 2025-10-23 16:27:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115424417623809144...

CVE-2025-62771

creationtimestamp| type| source ---|---|--- 2025-10-22 14:00:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418179313652784...

UTT 1250GW Buffer Overflow Vulnerability

The UTT 1250GW is an enterprise-grade wireless router from Atech Technology Ltd. designed for SOHO Small Office/Home Office environments, focusing on wireless coverage and network management features. The UTT 1250GW suffers from a buffer overflow vulnerability, which originates from the parameter...

EUVD-2020-4778

Malware in sbrugna...

GHSA-35G6-RRW3-V6XC

creationtimestamp| type| source ---|---|--- 2025-10-06 16:02:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115328061935482403...

CVE-2025-11323 UTT 1250GW formUserStatusRemark strcpy buffer overflow

A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

GHSA-54J7-GRVR-9XWG

creationtimestamp| type| source ---|---|--- 2025-09-25 13:53:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115265269823527423...

CVE-2025-9584

creationtimestamp| type| source ---|---|--- 2025-08-28 20:18:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108236769126304...

GHSA-C2GV-XGF5-5CC2

creationtimestamp| type| source ---|---|--- 2025-08-27 18:57:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115102255675248188...

CVE-2025-34161

creationtimestamp| type| source ---|---|--- 2025-08-27 17:04:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115101811324852634 2025-08-28 14:12:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/49385 2025-08-30 21:02:29+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2020-35480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MediaWiki before 1.35.1. Missing users accounts that don't exist and hidden users accounts that have been explicitly hidden due to...