42703 matches found
GO-2025-3817 Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana
Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports fro...
CVE-2025-50738
creationtimestamp| type| source ---|---|--- 2025-07-29 17:12:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv4m3ubwc52z...
CVE-2025-53077
creationtimestamp| type| source ---|---|--- 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...
CVE-2025-54381
creationtimestamp| type| source ---|---|--- 2025-07-29 03:36:49+00:00| published-proof-of-concept| https://github.com/bentoml/BentoML/security/advisories/GHSA-mrmq-3q62-6cc8 2025-07-30 03:00:05+00:00| published-proof-of-concept| Telegram/ymfDcJJei73TCRKQzCboKGwK4pwFpRPmdZcBrNWP81VMIJA 2025-07-30...
CVE-2025-43215
creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-679/...
CVE-2025-30754
creationtimestamp| type| source ---|---|--- 2025-07-28 14:06:12+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luzr7lucmc22 2025-11-26 22:13:04+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m6kutniokc2l 2025-11-26 22:23:17+00:00| seen|...
CVE-2025-6241
creationtimestamp| type| source ---|---|--- 2025-07-28 13:54:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3luzqleupgi2y...
CVE-2025-38495
In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...
CVE-2025-38495 HID: core: ensure the allocated report buffer can contain the reserved report ID
In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...
CVE-2023-53160
creationtimestamp| type| source ---|---|--- 2025-07-28 09:29:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzbqgnxrf27...
CVE-2025-54416
creationtimestamp| type| source ---|---|--- 2025-07-28 09:20:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3luzbaa54mw2b 2025-08-03 07:31:35+00:00| seen| https://t.me/bhhub/1120 2025-08-03 07:31:35+00:00| seen| https://t.me/bhhub/858 2026-04-13 19:00:13+00:00|...
PT-2025-31104 · Meddream · Meddream Pacs Premium
Name of the Vulnerable Software and Affected Versions: meddream MedDream PACS Premium version 7.3.5.860 Description: A reflected cross-site scripting xss vulnerability exists in the radiationDoseReport.php functionality. A specially crafted URL can lead to arbitrary javascript code execution. An...
curl: Vulnerability Report: Public Exposure of Security Audit File
Summary: A sensitive internal security audit report file for cURL/libcurl—specifically cure53-curl-report-2016.pdf—was found to be publicly accessible via search engine dorking. This file includes detailed vulnerability findings, exploit vectors, code review observations, and remediation advice...
BELL-CVE-2025-38457
Bulletin has no description...
CVE-2025-8170
creationtimestamp| type| source ---|---|--- 2025-07-25 21:13:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114915936740178131...
CVE-2025-38384
In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix memory leak of ECC engine conf Memory allocated for the ECC engine conf is not released during spinand cleanup. Below kmemleak trace is seen for this memory leak: unreferenced object 0xffffff80064f00e0 size 8:...
CVE-2025-36728
creationtimestamp| type| source ---|---|--- 2025-07-25 17:09:49+00:00| seen| https://bsky.app/profile/potato.software/post/3lusk3af3yc2g 2025-10-16 16:48:49+00:00| seen| https://gist.github.com/Darkcrai86/a4b19cc327512cf5ba6ada67c7cd231c...
CVE-2025-38431
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix regression with native SMB symlinks Some users and customers reported that their backup/copy tools started to fail when the directory being copied contained symlink targets that the client couldn't parse - even...