CVE-2025-64228

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Retrieve Embedded Sensitive Data.This issue affects SUMO Affiliates Pro: from n/a through = 11.0.0...

CVE-2025-12334

A vulnerability was found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument prodname/proddesc/prodcost results in cross site scripting. It is possible to launch the attack remotely. The exploit has been mad...

CVE-2025-61247

indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password parameter of login.php...

WordPress wpForo Forum plugin <= 2.4.8 - Unauthenticated SQL Injection via get_members Function vulnerability

Unauthenticated SQL Injection via getmembers Function vulnerability discovered by mikemyers in WordPress Plugin wpForo Forum versions = 2.4.8...

CVE-2025-12194

The CVE-2025-12194 vulnerability concerns Uncontrolled Resource Consumption (CWE-400) in Legion of the Bouncy Castle Inc. products: Bouncy Castle for Java FIPS (bc-fips) and Bouncy Castle for Java LTS (bcprov-lts8on). IBM’s Security Bulletin for IBM Watson Speech Services Cartridge confirms affec...

CVE-2025-60552

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup...

PT-2025-43742

CVE-2025-62828 - SAP SQL Injection CVE ID : CVE-2025-62828 Published : Oct. 24, 2025, 3:15 a.m. | 4 hours, 2 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2025-58078

creationtimestamp| type| source ---|---|--- 2025-10-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01 2025-10-23 23:28:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3vj7hdql22c...

CVE-2023-53720

creationtimestamp| type| source ---|---|--- 2025-10-22 14:57:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3s46n4y2u2f...

CVE-2025-62775

creationtimestamp| type| source ---|---|--- 2025-10-22 06:05:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3r6hf3grk2f 2025-10-22 14:00:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418179313652784...

CVE-2025-40005

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

CVE-2025-11680

Out-of-bounds Write in unfilterscanline in warmcat libwebsockets allows, when the LWSWITHUPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a...

CVE-2025-59483

creationtimestamp| type| source ---|---|--- 2025-10-15 14:16:02+00:00| seen| Telegram/hHwt279m4B7whsCaLSnjAAbtbRqc8bvUaWCqUB-t0qXhVs...

CVE-2025-61974

When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-10743

creationtimestamp| type| source ---|---|--- 2025-10-15 11:32:47+00:00| seen| https://gist.github.com/Darkcrai86/2b29b9dc54bdeb642265bfe7905bfb29...

CVE-2025-26860

creationtimestamp| type| source ---|---|--- 2025-10-15 06:18:32+00:00| seen| Telegram/PCb8w8JVbgdJblkYqzj387wg5fdBWwYEddTgidrHWKto...

CVE-2025-59195 Windows Graphics Component Denial of Service Vulnerability

...

CVE-2025-58728

CVE-2025-58728 is a Windows Bluetooth Service use-after-free elevation-of-privilege vulnerability. Connected documents corroborate a local, privilege-escalation impact (CVSS-like note: 7.8 HIGH, local access, no user interaction). The NCSC data lists CVE-2025-58728 under Windows Bluetooth Service...

CVE-2025-20721

creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...

CVE-2025-52650

CVE-2025-52650 – HCL AION v2.0 : A CSP-related issue allows inline script execution due to improper CSP enforcement in HCL AION version 2.0. The root cause is CSP misconfiguration that fails to block inline scripts, enabling potential script injection within the application. Documented sources (P...