EUVD-2025-32121

Malicious code in bioql PyPI...

CVE-2025-59772 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59762

CVE-2025-59762 is a reflected XSS in AndSoft e-TMS v25.03. The vulnerability stems from insufficient validation of the parameters l, demo, demo2, TNTLOGIN, UO and SuppConn in /clt/LOGINFRM_DLG.ASP, enabling an attacker to inject JavaScript via a malicious URL. Documented across NVD/CVE records an...

CVE-2025-46148

creationtimestamp| type| source ---|---|--- 2025-09-24 05:17:18+00:00| seen| https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a 2025-09-25 14:33:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115265426624032158...

Cross-site Scripting (XSS)

Overview @meshconnect/web-link-sdk is an A client-side JS library for integrating with Mesh Connect Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createLink.openLink function. An attacker can execute arbitrary JavaScript code in the context of the parent pag...

0xtrails (>=0.1.9 <=0.6.6), @aarc-dev/deposit-widget (>=0.3.0 <=0.4.47) +11 more potentially affected by CVE-2025-59430 via @meshconnect/web-link-sdk (>=3.0.2 <=3.2.14)

@meshconnect/web-link-sdk NPM version =3.0.2, =0.1.9, =0.3.0, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.4, =1.0.0, =1.1.0, =1.1.0, =1.1.0, =1.0.0, =1.0.5 Source cves: CVE-2025-59430 Source advisory: SNYK:JS-MESHCONNECTWEBLINKSDK-13004671...

0xtrails (>=0.1.9 <=0.6.6), @aarc-dev/deposit-widget (>=0.3.0 <=0.4.47) +13 more potentially affected by CVE-2025-59430 via @meshconnect/web-link-sdk (>=2.1.1 <=3.2.14)

@meshconnect/web-link-sdk NPM version =2.1.1, =0.1.9, =0.3.0, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.4, =0.1.15, =0.0.2, =1.0.0, =1.1.0, =1.1.0, =1.1.0, =1.0.0, =1.0.5 Source cves: CVE-2025-59430 Source advisory: OSV:GHSA-VH3F-QPPR-J97F...

CVE-2025-58250

creationtimestamp| type| source ---|---|--- 2025-09-22 20:04:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzh7dftbxp2t...

CVE-2025-10416

creationtimestamp| type| source ---|---|--- 2025-09-15 03:02:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lytsxfzcbu2a 2025-09-15 06:19:07+00:00| seen| https://gist.github.com/Darkcrai86/220794bb2c069ffa50d43090e03af30a...

Apple多款产品 安全漏洞

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems.Apple iOS is a suite of operating systems developed for mobile devices.Apple iPadOS is a suite of operating systems for the iPad tablet computer. A security vulnerability exists in...

CVE-2025-59363

creationtimestamp| type| source ---|---|--- 2025-09-14 07:47:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyrsg5iboe2c 2025-09-15 03:01:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lytswmwk3f2d 2025-09-15 07:51:31+00:00| seen|...

CVE-2025-43789

creationtimestamp| type| source ---|---|--- 2025-09-12 05:17:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lymj54begf2c...

CVE-2025-10246

creationtimestamp| type| source ---|---|--- 2025-09-11 06:51:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyk5vfvpyz2c...

CVE-2025-10236

creationtimestamp| type| source ---|---|--- 2025-09-11 02:57:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyjqsr37fs2t...

CVE-2025-32990

creationtimestamp| type| source ---|---|--- 2025-09-10 09:29:04+00:00| seen| https://gist.github.com/Darkcrai86/b87e14a5bc55e398469cc37b642c3272 2025-09-30 01:31:27+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3lzzeuwsiue2i 2025-10-13 02:31:29+00:00| seen|...

CVE-2007-4105

creationtimestamp| type| source ---|---|--- 2025-09-09 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lygmjfpvlo2g...

CVE-2025-43776

creationtimestamp| type| source ---|---|--- 2025-09-09 15:23:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyfzlgrych2t...

CVE-2025-56266

CVE-2025-56266 affects Avigilon ACM v7.10.0.20. The connected nuclei template confirms a Host Header Injection vulnerability that enables arbitrary code execution via a crafted HTTP request (crafted URL). Root cause is host header manipulation affecting request handling in Avigilon ACM, enabling ...

CVE-2025-7045

creationtimestamp| type| source ---|---|--- 2025-09-06 07:19:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly5n64j2yw2d...

CVE-2025-7445

creationtimestamp| type| source ---|---|--- 2025-09-05 01:07:05+00:00| seen| https://bsky.app/profile/kubernetes.dev/post/3ly2hufadhn2o 2025-09-05 05:15:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly2vrafyhq2f 2025-09-05 13:21:11+00:00| seen|...