Author: Angelo Barbosa

A vulnerability classified as critical has been found in Craft CMS up to 4.13.7/5.5.4. Affected is an unknown function. The manipulation leads to code injection. This vulnerability is traded as CVE-2025-23209. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

A vulnerability was found in OtCMS up to 7.46. It has been rated as critical. This issue affects some unknown processing of the file /admin/read.php. The manipulation leads to server-side request forgery. The identification of this vulnerability is CVE-2024-57252. The attack may be initiated remotely. There is no exploit...

A vulnerability was found in Jupyter nbgrader 0.9.4. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to exposure of resource. This vulnerability was named CVE-2025-23205. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

A vulnerability was found in devycreates Bible-Module up to 0.0.2. It has been classified as critical. This affects the function FetchVerse/FetchPassage. The manipulation leads to injection. This vulnerability is uniquely identified as CVE-2025-23202. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

A vulnerability was found in aws aws-cdk 2.148.1 and classified as problematic. Affected by this issue is the function tls.connect of the component IAM OIDC Custom Resource Provider Package. The manipulation leads to improper verification of cryptographic signature. This vulnerability is handled as CVE-2025-23206. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected...