CVE-2025-39738 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39738 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38399 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38399 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

Advisory ROSA-SA-2025-3019

software: git 2.51.0 WASP: ROSA-CHROME unaffected versions = git-2.51.0-1 affected versions git-2.51.0-1 CVE-ID: CVE-2025-48384 BDU-ID: 2025-08691 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Git distributed version control system of the Microsoft Visual Studio software development tool is...

CVE-2025-11064

creationtimestamp| type| source ---|---|--- 2025-09-27 16:32:33+00:00| seen| https://gist.github.com/Darkcrai86/463e0b58b27b09ef2133932129390339...

WordPress WPFront User Role Editor Plugin <= 4.2.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin WPFront User Role Editor versions = 4.2.3...

CVE-2025-58671

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in morganrichards Auction Feed auction-feed allows Stored XSS.This issue affects Auction Feed: from n/a through = 1.1.4...

RHEL 10 : avahi (RHSA-2025:16441)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16441 advisory. Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service...

CVE-2025-58676

Cross-Site Request Forgery CSRF vulnerability in extendyourweb HORIZONTAL SLIDER horizontal-slider allows Stored XSS.This issue affects HORIZONTAL SLIDER: from n/a through = 2.4...

CVE-2025-59672

creationtimestamp| type| source ---|---|--- 2025-09-19 05:15:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz64buchrn2c...

SUSE CVE-2025-58364

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...

CVE-2025-54259 Substance3D - Modeler | Integer Overflow or Wraparound (CWE-190)

Substance3D - Modeler versions 1.22.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Sco...

CVE-2025-55142

creationtimestamp| type| source ---|---|--- 2025-09-09 19:01:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lygfrc7coh2t...

CVE-2025-9061

creationtimestamp| type| source ---|---|--- 2025-09-09 09:10:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyferf2mc22l...

CVE-2025-9849

creationtimestamp| type| source ---|---|--- 2025-09-06 04:05:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly5ccoxwlf26...

CVE-2025-58353

creationtimestamp| type| source ---|---|--- 2025-09-04 22:55:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly2aj6cjvb23...

CVE-2025-36895

Information disclosure...

CVE-2025-55748

creationtimestamp| type| source ---|---|--- 2025-09-03 23:00:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxxqcvdug22g 2025-09-04 00:02:14+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxxtriiq7p2f 2025-10-17 03:47:37+00:00| confirmed|...

CVE-2025-58637

creationtimestamp| type| source ---|---|--- 2025-09-03 18:02:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxx7nlr4kd2n 2025-09-03 20:30:44+00:00| seen| https://gist.github.com/Darkcrai86/73cdc97bd61b3813f4c675944be38e11...

CVE-2025-58639

creationtimestamp| type| source ---|---|--- 2025-09-03 17:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxx6aqzl5g27...

CVE-2025-9919 1000projects Beauty Parlour Management System bwdates-reports-details.php sql injection

A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploi...