CVE-2025-32463 vulnerabilities

Vulnerabilities for packages: sudo...

CVE-2025-53493

creationtimestamp| type| source ---|---|--- 2025-07-02 17:49:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyrkl4e662p...

CVE-2025-38093

creationtimestamp| type| source ---|---|--- 2025-07-02 17:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyp2odabq2m...

CVE-2025-20309

creationtimestamp| type| source ---|---|--- 2025-07-02 16:40:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114784627483485422 2025-07-02 17:11:38+00:00| seen| https://t.me/TheDarkWebInformer/18723 2025-07-02 17:50:15+00:00| seen|...

CVE-2025-6942

creationtimestamp| type| source ---|---|--- 2025-07-02 16:19:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lsymew6qgmq2...

CVE-2025-34057

An information disclosure vulnerability exists in Ruijie NBR series routers known to affect NBR2000G, NBR1300G, and NBR1000 models via the /WEBVMS/LEVEL15/ endpoint. By crafting a specific POST request with modified Cookie headers and specially formatted parameters, an unauthenticated attacker ca...

CVE-2025-34069

creationtimestamp| type| source ---|---|--- 2025-07-02 13:56:11+00:00| seen| https://bsky.app/profile/potato.software/post/3lsyejtnlt62s 2025-07-02 14:36:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114784141478579135 2026-10-06 21:00:04+00:00| seen|...

CVE-2024-8419

The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication...

CVE-2025-6437

creationtimestamp| type| source ---|---|--- 2025-07-02 09:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxvdy2lq42a...

CVE-2025-27021

The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool. This could allow sensitive information disclosure, denial of service, and privilege escalation by...

CVE-2025-27023 Improper Input Validation in Infinera G42

Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands. Details: The web interface based management of the Infinera G42 appliance enables the feature of executing a restricted set of...

CVE-2025-24331 Nokia Single RAN baseband OAM service extensive capabilities

The Single RAN baseband OAM service is intended to run as an unprivileged service. However, it initially starts with root privileges and assigns certain capabilities before dropping to an unprivileged level. The capabilities retained from the root period are considered extensive after the privile...

CVE-2025-6017 Rhacm: users with clusterreader role can see credentials from managed-clusters

A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to...

CVE-2025-6463 Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Form Submission Deletion

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'entrydeleteuploadfiles' function in all versions up to, and including, 1.44.2. This makes it possible for...

CVE-2025-6686

creationtimestamp| type| source ---|---|--- 2025-07-02 04:12:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20099 2025-07-02 09:53:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxwyfszry2m...

CVE-2025-6686 Magic Buttons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via magic-button Shortcode

The Magic Buttons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's magic-button shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2022-37450

creationtimestamp| type| source ---|---|--- 2025-07-01 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lswluwv7jh27 2026-06-19 12:47:06+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2ad06381-3010-461b-a1d8-d2e5e954b632...

CVE-2025-53100

creationtimestamp| type| source ---|---|--- 2025-07-01 18:05:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114779298982762165 2025-07-01 18:09:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20070...

CVE-2025-53103 JUnit OpenTestReportGeneratingListener can leak Git credentials

JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git credentials. The impact depends on the level of the access token exposed through the OpenTestReportGeneratingListener. If these test reports are...

CVE-2025-6297

The dpkg package manager, specifically the dpkg-deb utility, is vulnerable to a Denial of Service (DoS) condition due to improper sanitization of directory permissions during the extraction of a control member into a temporary directory. If automated and repeated commands are executed on adversar...