CVE-2025-47339

creationtimestamp| type| source ---|---|--- 2026-01-07 00:46:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbsakjreqp2r 2026-01-07 07:23:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115852613280042209 2026-01-07 16:17:47+00:00| seen|...

PT-2026-2123

Name of the Vulnerable Software and Affected Versions Parsl versions prior to 2026.01.05 Description A SQL Injection issue exists in the parsl-visualize component. The application builds SQL queries using unsafe string formatting with user-supplied input workflow id taken directly from URL routes...

PT-2026-1440

FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the 'url' GET parameter to inject malicious JavaScript and potentially hijack user sessions or...

CVE-2026-0589

creationtimestamp| type| source ---|---|--- 2026-01-05 14:00:58+00:00| seen| Telegram/OnsG3OkAw79zRAAGEwz-ObL4fanvyYerBQxPUZBTsapiCw 2026-01-05 16:39:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbout5rhid2o...

CVE-2025-14428

creationtimestamp| type| source ---|---|--- 2026-01-01 18:59:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbf2sjn2cp2g 2026-01-02 07:58:30+00:00| seen| https://gist.github.com/Darkcrai86/2ac13fecaef2b028059530932a95c75d...

CVE-2025-69203

creationtimestamp| type| source ---|---|--- 2026-01-01 17:55:51+00:00| published-proof-of-concept| https://github.com/SignalK/signalk-server/security/advisories/GHSA-vfrf-vcj7-wvr8 2026-01-01 22:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbfhm5yeka2y 2026-01-02...

CVE-2025-22197

creationtimestamp| type| source ---|---|--- 2026-01-01 05:28:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbdni2pyii2m...

PT-2026-4876

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw exists in libsoup, an HTTP client library, related to CRLF Carriage Return Line Feed Injection. This issue occurs when an HTTP proxy is configured and the library improperly handles...

CVE-2025-69286

RAGFlow prior to 0.22.0 uses an insecure key generation algorithm for API keys and beta tokens. Both tokens are generated with the same URLSafeTimedSerializer and predictable inputs, so a user with the shared assistant/agent URL can derive the personal API key, granting full control over the owne...

CVE-2025-66150

creationtimestamp| type| source ---|---|--- 2025-12-31 20:39:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcpwbidou2y...

lfi_tester.py

chmod +x lfitest...

EUVD-2025-205863

Ksenia Security Lares 4.0 version 1.6 contains a URL redirection vulnerability in the 'cmdOk.xml' script that allows attackers to manipulate the 'redirectPage' GET parameter. Attackers can craft malicious links that redirect authenticated users to arbitrary websites when clicking on a specially...

CVE-2025-55060

CWE-601 URL Redirection to Untrusted Site 'Open Redirect'...

CLSA-2025-1767098873 tomcat: Fix of CVE-2025-55752

CVE-2025-55752: fix path traversal vulnerability in URL normalization and improve QSA/QSD rewrite handling...

CVE-2025-66861

creationtimestamp| type| source ---|---|--- 2025-12-29 16:43:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803855977149298 2025-12-29 18:31:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5hsyps3y2q 2026-03-19 00:00:00+00:00| seen|...

GNU Wget2 安全漏洞

GNU Wget2 is a web-based download tool from the American GNU community. A security vulnerability exists in GNU Wget2 that stems from a stack buffer overflow when handling specially crafted URL paths, which could lead to memory corruption...

D-Link DWR-M920 安全漏洞

The D-Link DWR-M920 is a 4GLTE wireless router manufactured by Youxun D-Link. The D-Link DWR-M920 suffers from a buffer overflow vulnerability that stems from the incorrect manipulation of the parameter submit-url in the function sub423848 in the file /boafrm/formParentControl, for which no...

CVE-2025-52599

creationtimestamp| type| source ---|---|--- 2025-12-26 08:42:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mauvjoeptt2y 2026-01-07 19:08:58+00:00| seen| Telegram/0Jzl9Q6YMruvhDow6TT000AAv9kgikcEbuH5cbueyHp7zA...

CVE-2025-68742

creationtimestamp| type| source ---|---|--- 2025-12-24 15:01:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maqjquyax42r 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2017-20192

creationtimestamp| type| source ---|---|--- 2025-12-24 03:37:55+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-20192.yaml 2025-12-24 09:00:05+00:00| published-proof-of-concept| Telegram/VnCmfh6FKXcDDP1mfmp0-bwK1xebRrswxVAwUN4mR3Zgv8...