Archive
23 February 2026
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
High 7.1CVE-2025-68930 Public exploit
Traccar Missing Origin Validation in WebSockets
Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in the `/api/socket` endpoint. The application fails to validate the `Origin` header during the WebSocket handsha…
-
High 8.5CVE-2025-67733 Public exploit
Valkey Affected by RESP Protocol Injection via Lua error_reply
Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampe…
-
High 8.8CVE-2026-25747 Public exploit
Apache Camel LevelDB: Deserialization of Untrusted Data in Camel LevelDB
Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component. The Camel-LevelDB DefaultLevelDBSerializer class deserializes data read from the LevelDB aggregation repository using java.io.ObjectInputStream without applying any ObjectInput…
-
High 7.4CVE-2025-63946 Public exploit
A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables…
-
High 7.4CVE-2025-63945 Public exploit
A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a l…