CLEANSTART-2026-ME39024 Security fixes in temporal-server 1.29.7-r2

Package temporal-server version 1.29.7-r2 fixes 7 vulnerabilities: CVE-2026-5724, CVE-2025-14987, CVE-2025-14986, CVE-2026-5199, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-IZ19721 Security fixes in temporal-server 1.31.1-r5

Package temporal-server version 1.31.1-r5 fixes 9 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-5724, ghsa-q98v-9f9w-f49q, ghsa-hmhp-gh8m-c8xp, ghsa-p2gr-hm8g-q772...

CLEANSTART-2026-JS88744 Security fixes in temporal-server 1.31.1-r4

Package temporal-server version 1.31.1-r4 fixes 8 vulnerabilities: CVE-2026-5724, ghsa-q98v-9f9w-f49q, ghsa-hmhp-gh8m-c8xp, ghsa-p2gr-hm8g-q772, ghsa-xpg8-3hhp-p7w8...

CVE-2023-5724 vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2026-5724

creationtimestamp| type| source ---|---|--- 2026-04-10 22:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6gal4ciy2m...

MiracleLinux 7 : firefox-115.4.0-1.0.1.el7.AXS7 (AXSA:2023-6556:40)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6556:40 advisory. Mozilla: Queued up rendering could have allowed websites to clickjack CVE-2023-5721 Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR...

MiracleLinux 8 : firefox-115.4.0-1.el8.ML.1 (AXSA:2023-6572:42)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6572:42 advisory. Mozilla: Queued up rendering could have allowed websites to clickjack CVE-2023-5721 Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR...

TencentOS Server 4: firefox (TSSA-2024:0159)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0159 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 3: thunderbird (TSSA-2023:0262)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0262 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2025-5724

creationtimestamp| type| source ---|---|--- 2025-06-06 08:55:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwhm7ytzz2s...

CVE-2025-5724

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /script/academic/subjects of the component Subjects Page. The manipulation of the argument Subject leads to cross site scripting. It...

CVE-2025-5724 SourceCodester Student Result Management System Subjects Page subjects cross site scripting

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /script/academic/subjects of the component Subjects Page. The manipulation of the argument Subject leads to cross site scripting. It...

Linux Distros Unpatched Vulnerability : CVE-2023-5724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. This vulnerability affects Firefox 119,...

CGA-5724-8HFG-FH92

Bulletin has no description...

Grandstream UCM62xx IP PBX WebSocket Blind SQL Injection Credential Dump

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Grandstream UCM62xx IP PBX WebSocket Blind SQL Injection Credential Dump', 'Description' = %q This module uses a blind SQL injection CVE-2020-572...

CVE-2024-5724 Photo Video Gallery Master <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection

The Photo Video Gallery Master plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.3 via deserialization of untrusted input 'PVGMallphotosdetails' parameter. This makes it possible for authenticated attackers, with Contributor-level access and abov...

WordPress Photo Video Gallery Master Plugin <= 1.5.3 is vulnerable to PHP Object Injection

Software Photo Video Gallery Master Type Plugin Vulnerable versions = 1.5.3 Fixed in N/A OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-5724 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID 22871a87af76 Credits Francesco Carlucci Required...

CGA-5724-C4G9-J4CX

Bulletin has no description...

openSUSE: Security Advisory for MozillaThunderbird (SUSE-SU-2023:4302-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for MozillaFirefox (SUSE-SU-2023:4214-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...