NVD disclosure day
CVE-2025-68428
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Node.js build of the jsPDF library could allow unauthorized access to arbitrary local files, embedding their contents into generated PDFs. This occurs when unsanitized user input is passed to specific library methods. Reader's should care if they use this library and if the vulnerable functionali
CVE-2025-65110
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Vega, a visualization library, contains a DOM XSS vulnerability that can lead to arbitrary JavaScript execution if applications expose its components to the global scope and accept user-defined specifications. This could allow attackers to steal sensitive information or manipulate data by tricking users into opening ma
CVE-2025-64424
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Coolify, a server and application management tool, has a command injection vulnerability. A low-privileged user could execute system commands as root, potentially compromising the entire instance and its managed resources. It is uncertain if a patch is available.
CVE-2025-61781
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in OpenCTI allows unauthorized deletion of workspaces, dashboards, and investigation cases due to a lack of proper authorization checks. This could lead to the loss of critical threat intelligence data. Version 6.8.1 addresses this issue.
CVE-2025-59158
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A stored cross-site scripting vulnerability in Coolify allows a low-privilege user to inject malicious JavaScript into a project name, which can execute in an administrator's browser when interacting with the project, potentially impacting administrative operations.
CVE-2025-59156
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Coolify, a server management tool, allows a low-privileged user to inject malicious directives during application deployment. This could enable an attacker to mount the host filesystem and execute arbitrary commands with root privileges, bypassing container isolation and potentially compromising the
CVE-2025-55204
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists in the Muffon music streaming client, allowing attackers to execute arbitrary code on a user's machine via a specially crafted link. This RCE flaw impacts user devices and requires user interaction with a malicious link or website. Verifying application use and user exposure is important
CVE-2025-59467
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A Cross-Site Scripting vulnerability in the UCRM Argentina AFIP invoices Plugin could allow privilege escalation if an administrator is tricked into visiting a malicious page, though the plugin is disabled by default.
CVE-2025-39484
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in Waituk Entrada due to improper neutralization of special SQL command elements. This could allow attackers to access or manipulate data if the affected technology is reachable. Understanding if Entrada is in use and its potential exposure is crucial for data integrity and
CVE-2025-66376
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A cross-site scripting vulnerability in Zimbra Collaboration Suite's Classic UI allows attackers to inject malicious code via specially crafted HTML emails, potentially leading to unauthorized data access and system manipulation. This impacts organizations by creating a risk to data integrity and user privacy. Affected
CVE-2025-15029
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability exists in Centreon Infra Monitoring's Awie export modules, allowing unauthenticated users to execute arbitrary SQL commands. This could lead to unauthorized access to or modification of sensitive data within the monitoring system. The main concern is confirming if this vulnerability is rel
CVE-2025-15026
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Centreon's Awie import module, allowing unauthenticated access to protected functions. This could permit unauthorized modification or deletion of monitoring data and configurations, impacting service integrity and availability. All Centreon deployments should assess relevance and expo
CVE-2025-68865
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An SQL Injection vulnerability in Infility Global allows attackers to execute malicious database commands, potentially leading to unauthorized data access or modification. This issue affects specific versions of the product and is exploitable over the network without authentication. Organizations should confirm the pre
CVE-2025-31048
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unrestricted file upload vulnerability in the Shopo WordPress theme permits authenticated users to upload web shells to a web server, potentially leading to server compromise. This issue could allow an attacker to gain control of the server. It is important to determine if this theme is deployed and assess its expos
CVE-2025-30633
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in the AA-Team Amazon Native Shopping Recommendations component, potentially allowing unauthorized database access. Attackers could exploit this by sending malicious requests, leading to the disclosure of sensitive information. Confirming the use and exposure of this compon