CVE-2025-8787

creationtimestamp| type| source ---|---|--- 2025-08-10 03:51:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvzevlzsts2d...

CVE-2025-8785

creationtimestamp| type| source ---|---|--- 2025-08-10 03:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvzemnbs3y2a...

CVE-2025-8788

creationtimestamp| type| source ---|---|--- 2025-08-10 03:41:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvzedoq6ki2k...

CVE-2025-55008

creationtimestamp| type| source ---|---|--- 2025-08-10 03:01:21+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvzc4qvkys2g...

CVE-2025-8775

creationtimestamp| type| source ---|---|--- 2025-08-10 01:01:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvz3gxxthn2l...

CVE-2025-48621

creationtimestamp| type| source ---|---|--- 2025-08-06 15:00:07+00:00| published-proof-of-concept| Telegram/ihOkiwe6OhHQI2TZ1X3ddAGzem4yCBX0qBNzRmX2HDnWoU 2025-12-10 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m7nxgadd5e2p...

WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 6.4.8 - Authenticated (Author+) SQL Injection vulnerability

Authenticated Author+ SQL Injection vulnerability discovered by Kenneth Billones in WordPress Plugin Filebird versions = 6.4.8...

RHEL 10 : opentelemetry-collector (RHSA-2025:12850)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:12850 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: net/http: Request smuggling due to acceptance of inval...

RHEL 10 : jq (RHSA-2025:12882)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:12882 advisory. jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or...

Oracle Linux 10 : jq (ELSA-2025-12882)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-12882 advisory. - jq: jq has signed integer overflow in jv.c:jvparraywrite CVE-2024-23337 Tenable has extracted the preceding description block directly from the...

RHEL 10 : kernel (RHSA-2025:12662)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:12662 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: padata: fix UAF in...

📄 Ultimate Control Receiver 1.2 Remote Code Execution

Ultimate Control Receiver version 1.2 is vulnerable to an unauthenticated remote code execution vulnerability. An attacker can exploit the keyboard input functionality over TCP to execute arbitrary system commands on the target machine without user interaction. Exploit Title: Ultimate Control...

WordPress Medical Addon for Elementor plugin <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Typewriter Widget vulnerability discovered by zer0gh0st in WordPress Plugin Medical Addon for Elementor versions = 1.6.3...

WordPress Blockspare plugin <= 3.2.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Image Slider Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Image Carousel and Image Slider Widgets vulnerability discovered by Webbernaut in WordPress Plugin Blockspare versions = 3.2.13.1...

WordPress Sina Extension for Elementor plugin <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Sina Posts`, `Sina Blog Post` and `Sina Table` Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Sina Posts, Sina Blog Post and Sina Table Widgets vulnerability discovered by stealthcopter in WordPress Plugin Sina Extension for Elementor versions = 3.7.0...

WordPress DELUCKS SEO Plugin <= 2.6.0 - Privilege Escalation Vulnerability

Privilege Escalation Vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin DELUCKS SEO versions = 2.6.0...

Oracle Linux 10 : thunderbird (ELSA-2025-12188)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-12188 advisory. 128.13.0-3.0.1 - Add Oracle prefs 128.13.0-3 - Update to 128.13.0 build3 128.13.0-2 - Update to 128.13.0 build2 128.13.0-1 - Update to 128.13.0 build...

Oracle Linux 10 : firefox (ELSA-2025-11797)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-11797 advisory. 128.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.13.0-1 - Update to 128.13.0 build1 Tenable has extracted the...

Oracle Linux 10 : unbound (ELSA-2025-12064)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12064 advisory. 1.20.0-12 - Fix CVE-2025-5994 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

RHEL 10 / 8 / 9 : Red Hat JBoss Web Server 6.1.1 (RHSA-2025:11741)

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11741 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised ...