CVE-2025-52711 WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor allows Cross Site Request Forgery.This issue affects Post and Page Builder by BoldGrid – Visual Drag and Drop Editor: from n/a through 1.27.8...

CVE-2025-52708 WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RealMag777 HUSKY woocommerce-products-filter allows PHP Local File Inclusion.This issue affects HUSKY: from n/a through = 1.3.7...

CVE-2025-32876

An issue was discovered on COROS PACE 3 devices through 3.0808.0. The BLE implementation of the COROS smartwatch does not support LE Secure Connections and instead enforces BLE Legacy Pairing. In BLE Legacy Pairing, the Short-Term Key STK can be easily guessed. This requires knowledge of the...

CVE-2022-49941

REJECTED CVE In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: avoid call of sleeping functions from atomic context...

CVE-2025-38083

creationtimestamp| type| source ---|---|--- 2025-06-20 11:46:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18933 2025-07-30 17:02:49+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lv73zcnzx327 2025-07-30 17:03:19+00:00| seen|...

CVE-2025-38083

In the Linux kernel, the following vulnerability has been resolved: netsched: prio: fix a race in priotune Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 1: lock root 2: qdisctreeflushbacklog 3: unlock root | ...

CVE-2025-4981

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to sanitize filenames in the archive extractor which allows authenticated users to write files to arbitrary locations on the filesystem via uploading archives with path traversal sequence...

CVE-2022-49949

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix memory leak in firmware upload In the case of firmware-upload, an instance of struct fwupload is allocated in firmwareuploadregister. This data needs to be freed in fwdevrelease. Create a new fwuploadfree...

CVE-2025-5125

creationtimestamp| type| source ---|---|--- 2025-06-20 09:47:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrzqzud2o62p 2025-06-23 20:47:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19266...

CVE-2025-6323

creationtimestamp| type| source ---|---|--- 2025-06-20 09:41:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18921 2025-06-20 09:54:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrzrgd4ege2m 2025-06-20 10:01:43+00:00| published-proof-of-concept|...

CVE-2025-6317 code-projects Online Shoe Store confirm.php sql injection

A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/confirm.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-6308

creationtimestamp| type| source ---|---|--- 2025-06-20 05:43:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18908 2025-06-20 07:52:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrzkmsiutp2k...

CVE-2025-6311

creationtimestamp| type| source ---|---|--- 2025-06-20 05:43:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18905 2025-06-20 06:31:32+00:00| published-proof-of-concept| Telegram/Lsxkp67itTa1h5mACVQNiU5Bk8pr3DRiHX80nXnZXGxgJw 2025-06-20 09:43:29+00:00| seen|...

CVE-2025-6295

creationtimestamp| type| source ---|---|--- 2025-06-20 02:31:56+00:00| published-proof-of-concept| Telegram/6w51Kjdt9vYT230GwENazQBSLqlWx5Y6Wp6oJ95ehWRNg 2025-06-20 02:43:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18898 2025-06-20 03:43:14+00:00| seen|...

CVE-2025-6294

creationtimestamp| type| source ---|---|--- 2025-06-20 01:33:52+00:00| seen| Telegram/3MtQD2Az6x3Z0JnV6xHkzIGmkFDUgMcQhDMc9KiJtjUx54 2025-06-20 03:55:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrz5evdygm25 2025-06-23 18:50:42+00:00| published-proof-of-concept|...

CVE-2025-6296 code-projects Hostel Management System empty_rooms.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /emptyrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack may be launched remotely. The...

CVE-2025-6291

A vulnerability, which was classified as critical, was found in D-Link DIR-825 2.03. This affects the function dofile of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t...

CVE-2025-48058 PowSyBl Core contains Polynomial REDoS’es

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to version 6.7.2, there is a potential polynomial Regular Expression Denial of Service ReDoS vulnerability in the PowSyBl's DataSource mechanism. If successfully exploited, a malicious actor can cause...

CVE-2025-48058

PowSyBl Core contains a polynomial ReDoS vulnerability in the DataSource mechanism (affecting listNames regex handling) prior to version 6.7.2. Exploitation can cause high CPU due to regex backtracking. The issue has been patched in com.powsybl:powsybl-commons:6.7.2 and related patches in 6.7.2+;...

CVE-2025-6276

creationtimestamp| type| source ---|---|--- 2025-06-20 00:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryqf6n75w2k 2025-06-23 19:47:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19257...