23691 matches found
CVE-2025-15129
creationtimestamp| type| source ---|---|--- 2025-12-28 11:04:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb26g73del2q...
WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Shortcodes and extra features for Phlox theme versions = 2.17.15...
CVE-2025-67288
creationtimestamp| type| source ---|---|--- 2025-12-22 19:44:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3malynpgpk32p 2025-12-22 21:47:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mam7j2ikoq2e 2025-12-23 04:04:45+00:00| seen|...
CVE-2025-13220
creationtimestamp| type| source ---|---|--- 2025-12-22 11:35:09+00:00| seen| https://gist.github.com/Darkcrai86/4cde20eae3d34ce50a57634af0b736f6...
CVE-2025-8305
CVE-2025-8305 concerns Check Point Identity Agent for Terminal Services. An authenticated local user can access plaintext debug files that expose sensitive information, enabling the user to claim security policy rules of another user. The root cause is sensitive data printed in plaintext in Ident...
CVE-2025-58934
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes The Gig thegig allows PHP Local File Inclusion.This issue affects The Gig: from n/a through = 1.18.0...
CVE-2025-62961
creationtimestamp| type| source ---|---|--- 2025-12-18 19:32:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabw5hsjla2r...
CVE-2025-68278
Tina is a headless content management system. In tinacms prior to version 3.1.1, tinacms uses the gray-matter package in an insecure way allowing attackers that can control the content of the processed markdown files, e.g., blog posts, to execute arbitrary code. tinacms version 3.1.1, @tinacms/cl...
HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution
Hewlett Packard Enterprise HPE has resolved a maximum-severity security flaw in OneView Software that, if successfully exploited, could result in remote code execution. The critical vulnerability, assigned the CVE identifier CVE-2025-37164 , carries a CVSS score of 10.0. HPE OneView is an IT...
CVE-2025-60053
creationtimestamp| type| source ---|---|--- 2025-12-18 09:52:51+00:00| seen| https://gist.github.com/Darkcrai86/e464d8d154121a71b1db7ccfcf6474e4...
CVE-2025-60078
creationtimestamp| type| source ---|---|--- 2025-12-18 09:44:36+00:00| seen| https://gist.github.com/Darkcrai86/2cf1877d0a9a3c717db6268d98346d0f...
CVE-2025-66119
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through = 1.1.5.9...
CVE-2025-47350
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application...
CVE-2025-14833 code-projects Online Appointment Booking System deletemanagerclinic.php sql injection
A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...
CVE-2025-40602
creationtimestamp| type| source ---|---|--- 2025-12-17 14:42:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115735431932943323 2025-12-17 17:17:00+00:00| seen| https://thehackernews.com/2025/12/sonicwall-fixes-actively-exploited-cve.html 2025-12-17 17:50:27+00:00| seen|...
CVE-2025-68287
A use-after-free vulnerability was found in the DWC3 USB controller driver in the Linux kernel. Multiple unsynchronized execution paths can invoke dwc3removerequests concurrently, leading to premature freeing of USB requests. When one path frees requests while another is still processing them, a...
CVE-2025-64246
creationtimestamp| type| source ---|---|--- 2025-12-16 09:49:46+00:00| seen| https://gist.github.com/Darkcrai86/66d8d19b606d711d23691c014b0e88b7...
CVE-2025-46276
creationtimestamp| type| source ---|---|--- 2025-12-12 23:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7tbbjydkl2e 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83...
CVE-2025-43518
creationtimestamp| type| source ---|---|--- 2025-12-12 23:10:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7t7jd5qgs2y 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83...