CVE-2025-36631

creationtimestamp| type| source ---|---|--- 2025-06-13 16:08:29+00:00| seen| Telegram/Fw0XBy1WaCOjxg2mWHXnG8lWV81E0IbizYC1ykRJG5IGg 2025-06-13 17:18:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriwxsddv523 2025-06-16 14:02:08+00:00| seen|...

CVE-2025-49580 XWiki allows privilege escalation through link refactoring

XWiki is a generic wiki platform. From 8.2 and 7.4.5 until 17.1.0-rc-1, 16.10.4, and 16.4.7, pages can gain script or programming rights when they contain a link and the target of the link is renamed or moved. This might lead to execution of scripts contained in xobjects that should have never be...

CVE-2025-6052 Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be writte...

CVE-2025-48917 EU Cookie Compliance (GDPR Compliance) - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-072

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal EU Cookie Compliance GDPR Compliance allows Cross-Site Scripting XSS.This issue affects EU Cookie Compliance GDPR Compliance: from 0.0.0 before 1.26.0...

CVE-2025-48918 Simple Klaro - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-071

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Simple Klaro allows Cross-Site Scripting XSS.This issue affects Simple Klaro: from 0.0.0 before 1.10.0...

CVE-2025-28382

creationtimestamp| type| source ---|---|--- 2025-06-13 15:25:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114676749186057555 2025-06-13 17:05:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriwb7srzh2p...

CVE-2025-6030

CVE-2025-6030 concerns the Cyclone Matrix TRF Smart Keyless Entry System’s Key Fob Transmitter, where the use of fixed learning codes enables a replay attack. The issue affects Cyclone Matrix TRF-based keyless systems and was demonstrated on a 2024 Kia Soluto, with reports of attacks on other Kia...

CVE-2025-45988

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bsSetCmd function...

CVE-2024-38824

Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory...

CVE-2025-29756

SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser. The MQTT server however did not have sufficient restrictions in place to limit the topics that a user could subscribe to. While t...

CVE-2025-5923

creationtimestamp| type| source ---|---|--- 2025-06-13 07:33:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18280 2025-06-13 11:49:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrielodf5g2m...

CVE-2025-22236

creationtimestamp| type| source ---|---|--- 2025-06-13 07:28:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhvvbpjhex2 2025-06-13 07:33:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18277 2025-06-13 07:34:25+00:00| seen|...

CVE-2025-45786

creationtimestamp| type| source ---|---|--- 2025-06-13 07:24:40+00:00| seen| https://gist.github.com/0xKunAlx0/a80bc7ec5acb2f19daa36257fedbcf11 2025-06-18 14:41:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18751 2025-06-18 15:31:20+00:00| published-proof-of-concept|...

CVE-2025-22239

Arbitrary event injection on Salt Master. The master's "minionevent" method can be used by and authorized minion to send arbitrary events onto the master's event bus...

CVE-2025-22237

An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on the master with the same privileges as the master process...

CVE-2025-22240

Arbitrary directory creation or file deletion. In the findfile method of the GitFS class, a path is created using os.path.join using unvalidated input from the “tgtenv” variable. This can be exploited by an attacker to delete any file on the Master's process has permissions to...

CVE-2024-38822

Multiple methods in the salt master skip minion token validation. Therefore a misbehaving minion can impersonate another minion...

CVE-2024-38822

creationtimestamp| type| source ---|---|--- 2025-06-13 06:58:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhuc33qatx2 2025-06-13 07:33:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18281 2025-06-13 11:38:24+00:00| seen|...

CVE-2024-38825

creationtimestamp| type| source ---|---|--- 2025-06-13 06:57:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhubrvh2j72 2025-06-13 07:33:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18278 2025-06-13 11:12:00+00:00| seen|...

CVE-2024-38823

creationtimestamp| type| source ---|---|--- 2025-06-13 06:57:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhubsb4puj2 2025-06-13 07:33:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18279 2025-06-13 12:08:44+00:00| seen|...