9221 matches found
CVE-2025-13412
creationtimestamp| type| source ---|---|--- 2025-11-20 00:46:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5zk5m4smy2n...
EUVD-2025-198244
EUVD-2025-198244...
EUVD-2025-198241
EUVD-2025-198241...
EUVD-2025-198243
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Spring Framework 5.3.x < 5.3.46 / 6.1.x < 6.1.24 / 6.2.x < 6.2.12 STOMP CSRF (CVE-2025-41254)
The version of Spring Framework installed on the remote host is 5.3.x prior to 5.3.46, 6.1.x prior to 6.1.24, or 6.2.x prior to 6.2.12. It is, therefore, affected by a STOMP CSRF vulnerability: - STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to...
EUVD-2025-198162
A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/adminrunning.php. Executing manipulation of the argument productname can lead to cross site scripting. The attack may be performed from...
EUVD-2025-198173
IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view...
EUVD-2025-198171
GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers sid in the publicly accessible log file located at /log/Flexiva%20LX.log. An unauthenticated attacker can retrieve valid session IDs and hijack sessions...
EUVD-2025-198168
A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes when application is configured to use local filesystem storage. SystemFileStorage.savefile method in core/storage.py uses filenames from user input without validation to construct savepath and save...
CVE-2025-65099
creationtimestamp| type| source ---|---|--- 2025-11-19 21:15:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5z6e2i6i22q...
EUVD-2025-198172
The Newtec Celox UHD models: CELOXA504, CELOXA820 running firmware version celox-21.6.13 is vulnerable to an authentication bypass. An attacker can exploit this issue by modifying intercepted responses from the /celoxservice endpoint. By injecting a forged response body during the loginWithUserNa...
EUVD-2025-198170
The ELCA Star Transmitter Remote Control firmware 1.25 for STAR150, BP1000, STAR300, STAR2000, STAR1000, STAR500, and possibly other models, contains an information disclosure vulnerability allowing unauthenticated attackers to retrieve admin credentials and system settings via an unprotected...
EUVD-2025-198216
Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...
CVE-2025-34331
creationtimestamp| type| source ---|---|--- 2025-11-19 17:14:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yqw2gy3l2s...
CVE-2024-8527
creationtimestamp| type| source ---|---|--- 2025-11-19 17:00:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yq3no6442k 2025-11-20 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-01...
CVE-2025-13396
A weakness has been identified in code-projects Courier Management System 1.0. This affects an unknown function of the file /add-office.php. This manipulation of the argument OfficeName causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...
EUVD-2025-198207
Improper Control of Generation of Code 'Code Injection' vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JD...
CVE-2025-12592
creationtimestamp| type| source ---|---|--- 2025-11-19 13:09:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yd7yytym26 2025-11-19 15:14:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115577012235338015...
SecurityMetrics Wins “Data Leak Detection Solution of the Year” in 2025 CyberSecurity Breakthrough Awards Program
Orem, United States, November 18th, 2025, CyberNewsWire SecurityMetrics, a leading innovator in compliance and cybersecurity, today announced that…...