9221 matches found
CVE-2025-65937
creationtimestamp| type| source ---|---|--- 2025-11-19 05:26:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5xjdnjd7y2b...
EUVD-2025-198199
An issue was discovered in bridgetech VB288 Objective QoE Content Extractor, firmware version 5.6.0-8, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint...
EUVD-2025-198214
The Axel Technology StreamerMAX MK II devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and...
EUVD-2025-198208
A reflected cross-site scripted XSS vulnerability in the /ecommerce/products.php component of E-commerce Project v1.0 and earlier allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into the id parameter...
CVE-2025-65015
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions from 1.3.3 to before 1.3.5 and from 1.4.0 to before 1.4.2, the ExceededSizeError exception messages are embedded with non-decoded JWT token parts and may cause...
CVE-2025-64996
creationtimestamp| type| source ---|---|--- 2025-11-18 18:04:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5wdaca3n52k...
CVE-2025-63829
eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Timet:: fraction function...
SpyCloud Unveils Top 10 Cybersecurity Predictions Poised to Disrupt Identity Security in 2026
Austin, TX/USA, 18th November 2025, CyberNewsWire...
CVE-2025-11243
creationtimestamp| type| source ---|---|--- 2025-11-18 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-02 2025-11-19 07:33:04+00:00| seen| https://infosec.exchange/users/offseq/statuses/115575199017022237 2025-11-19 09:04:44+00:00| seen|...
CVE-2025-65015
creationtimestamp| type| source ---|---|--- 2025-11-18 10:14:58+00:00| published-proof-of-concept| https://github.com/authlib/joserfc/security/advisories/GHSA-frfh-8v73-gjg4 2025-11-19 00:02:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/115573428387193257 2025-11-19 01:04:23+00:0...
CVE-2025-12173
creationtimestamp| type| source ---|---|--- 2025-11-18 09:11:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vfgem2zi2j...
CVE-2025-12404
creationtimestamp| type| source ---|---|--- 2025-11-18 09:09:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vfdeuync2k...
Mozilla Firefox ESR < 52.1
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-12 advisory. - Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex...
EUVD-2025-197861
PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting XSS via the quantity parameter in my-cart.php...
EUVD-2025-197860
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php...
CVE-2023-33177
creationtimestamp| type| source ---|---|--- 2025-11-17 15:00:08+00:00| exploited| Telegram/qn6bp8YUpk0QotLnP9WKGw1cgZ9AzFWXwr3JDEbfbgSiUY 2026-04-08 15:30:09+00:00| seen| https://bsky.app/profile/exploitdb-bot.bsky.social/post/3miymdnfo3u2h 2026-04-09 21:00:05+00:00| published-proof-of-concept|...
CVE-2025-13277
A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...
CVE-2025-13256
creationtimestamp| type| source ---|---|--- 2025-11-17 03:30:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5sbw6zozf26...
CVE-2025-13258
creationtimestamp| type| source ---|---|--- 2025-11-17 03:16:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5sb4mmpj72q 2025-11-17 09:02:08+00:00| seen| https://infosec.exchange/users/offseq/statuses/115564224606265170 2025-11-18 17:49:38+00:00| seen|...