CVE-2025-48444

creationtimestamp| type| source ---|---|--- 2025-06-11 17:09:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdvk3wrex2s...

CVE-2025-32291

Unrestricted Upload of File with Dangerous Type vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Using Malicious Files.This issue affects SUMO Affiliates Pro: from n/a through 11.1.0...

CVE-2025-49297

Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.This issue affects Grill and Chow: from n/a through = 1.6...

CVE-2025-49279

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogvy blogvy allows PHP Local File Inclusion.This issue affects Blogvy: from n/a through = 1.0.7...

CVE-2025-31638

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeton Spare allows Reflected XSS. This issue affects Spare: from n/a through 1.7...

CVE-2025-39475

Path Traversal: '.../...//' vulnerability in Frenify Arlo arlo allows PHP Local File Inclusion.This issue affects Arlo: from n/a through = 6.0.3...

CVE-2024-22363

creationtimestamp| type| source ---|---|--- 2025-06-11 15:29:00+00:00| seen| https://gist.github.com/EduardoCorpay/fdaeb4ec65cc4a1c8fcd2fb0162de09c...

CVE-2025-49710

creationtimestamp| type| source ---|---|--- 2025-06-11 15:27:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdpulf2dk2m 2025-06-11 20:15:58+00:00| seen| Telegram/nn4r48fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw 2025-06-13 22:36:03+00:00| seen|...

CVE-2025-5986

creationtimestamp| type| source ---|---|--- 2025-06-11 15:22:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdplmts5z2o...

CVE-2025-5687

creationtimestamp| type| source ---|---|--- 2025-06-11 15:12:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdozpv4nw2e 2025-06-14 04:33:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18351 2026-04-13 17:56:13+00:00| seen|...

CVE-2025-49146

pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with channel binding set to required default value is prefer, the driver would incorrectly allow connections to proceed with authentication methods that do not support...

CVE-2025-3473 IBM Security Guardium privilege escalation

IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the program...

CVE-2025-4922

creationtimestamp| type| source ---|---|--- 2025-06-11 14:03:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114665102687441572 2025-06-11 15:28:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdpwewpqt2r...

CVE-2025-4573

creationtimestamp| type| source ---|---|--- 2025-06-11 13:30:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18068 2025-06-11 15:07:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdoqrgcdc2a...

CVE-2025-48053

Discourse is an open-source discussion platform. Prior to version 3.4.4 of the stable branch, version 3.5.0.beta5 of the beta branch, and version 3.5.0.beta6-dev of the tests-passed branch, sending a malicious URL in a PM to a bot user can cause a reduced the availability of a Discourse instance...

CVE-2025-5144 The Events Calendar <= 6.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-’ parameters in all versions up to, and including, 6.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-47950

creationtimestamp| type| source ---|---|--- 2025-06-11 12:17:31+00:00| seen| https://bsky.app/profile/cloud-native.activitypub.awakari.com.ap.brid.gy/post/3lrdf7pspa5i2...

CVE-2025-49710

An integer overflow was present in OrderedHashTable used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4...

CVE-2025-49710

An integer overflow was present in OrderedHashTable used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4...

CVE-2025-41437

Zohocorp ManageEngine OpManager, NetFlow Analyzer, Network Configuration Manager, Firewall Analyzer and OpUtils versions 128565 and below are vulnerable to Reflected XSS on the login page...