498 matches found
CVE-2025-12161
creationtimestamp| type| source ---|---|--- 2025-11-08 04:32:05+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m53r5v3pyx24 2025-11-08 05:45:38+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m53vbant4sk2 2025-11-08 06:05:21+00:00| seen|...
CVE-2025-20731
creationtimestamp| type| source ---|---|--- 2025-11-04 09:40:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4sajl2lf62q...
CVE-2025-20738
creationtimestamp| type| source ---|---|--- 2025-11-04 08:45:37+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4s5h6pva4y2 2025-11-04 10:12:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4sccpirxj2s...
CVE-2025-11806
creationtimestamp| type| source ---|---|--- 2025-10-31 03:31:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4hk2latxj2a...
CVE-2025-43941
creationtimestamp| type| source ---|---|--- 2025-10-30 15:36:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gc3cmbjv2a...
CVE-2024-45161
A Cross-Site Request Forgery (CSRF) vulnerability exists in the administrative web GUI of the Blu-Castle BCUM221E wireless router, specifically affecting version 1.0.0P220507 . An attacker can exploit this issue through methods such as a crafted URL , image loading , or XMLHttpRequest to cause da...
CVE-2025-61043
creationtimestamp| type| source ---|---|--- 2025-10-28 17:27:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4bhdgfqsv27 2026-03-19 11:08:16+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mhfuet6rjk2u 2026-03-19 12:33:32+00:00| seen|...
CVE-2025-54965
creationtimestamp| type| source ---|---|--- 2025-10-27 18:51:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m473mhdwiw2g...
PT-2025-44053
Name of the Vulnerable Software and Affected Versions Frappe Learning versions prior to 2.39.1 Description Frappe Learning, a learning management system, had a security issue where students could access the Quiz Form if they possessed the URL. This allowed unauthorized access to quiz content...
CVE-2025-62256
creationtimestamp| type| source ---|---|--- 2025-10-23 15:20:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3unxbc5662o...
CVE-2025-61301
creationtimestamp| type| source ---|---|--- 2025-10-20 21:00:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115408506440457376 2025-10-21 01:20:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3o62rkrt22h...
CVE-2025-35059
Newforma Info Exchange NIX '/DownloadWeb/hyperlinkredirect.aspx' provides an unauthenticated URL redirect via the 'nhl' parameter...
CVE-2023-7311
creationtimestamp| type| source ---|---|--- 2025-10-16 21:02:37+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrlem7o27 2026-05-18 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2026-05-18 2026-05-22 00:00:00+00:00| exploited| The...
CVE-2025-54658
creationtimestamp| type| source ---|---|--- 2025-10-16 16:43:38+00:00| seen| https://gist.github.com/Darkcrai86/b4da33d01b6276bae1786afc8e2b6e3e...
CVE-2025-62376 pwn.college DOJO vulnerable to improper authentication in workspace endpoint allowing unauthorized Windows VM access
pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The...
AndSoft e-TMS Cross-Site Scripting Vulnerability (CNVD-2025-23539)
AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...
GHSA-5M9M-J5P7-M7F9 Casdoor is vulnerable to Improper Authorization
An issue in the permission verification module and organization/application editing interface in Casdoor before 2.63.0 allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly concatenating URLs after log...
GHSA-4789-QFC9-5F9Q
creationtimestamp| type| source ---|---|--- 2025-10-07 19:38:33+00:00| seen| https://seclists.org/oss-sec/2025/q4/17...
CVE-2025-11332 CmsEasy URL view.php cross site scripting
A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing a manipulation of the argument PHPSELF can lead to cross site scripting. The attack may be launched remotely. The exploit has been public...
