23691 matches found
CVE-2025-49793
creationtimestamp| type| source ---|---|--- 2025-06-11 05:06:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcn4qq6io2k...
CVE-2025-5828
creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-347/ 2025-06-25 18:52:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19519...
CVE-2025-49155
creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-362/ 2025-06-17 21:27:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrtgqtbo5a2m...
CVE-2025-5822
creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-340/ 2025-06-25 18:52:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19518...
CVE-2025-5984
creationtimestamp| type| source ---|---|--- 2025-06-11 02:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrceurbktc2s...
CVE-2025-47114
creationtimestamp| type| source ---|---|--- 2025-06-11 01:50:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcc6usfzi2o 2025-06-11 15:31:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18079...
CVE-2025-49091
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...
CVE-2025-5959
A Type Confusion vulnerability in the V8 engine of Google Chrome (prior to version 137.0.7151.103 ) allows a remote attacker to execute arbitrary code inside a sandbox. The flaw originates from accessing resources using incompatible types, which can be triggered via a crafted HTML page . Exploita...
WordPress Zota Theme <= 1.3.8 is vulnerable to Local File Inclusion
Software Zota Type Theme Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A4: Insecure Design Classification Local File Inclusion CVE CVE-2025-49257 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 511b31ea918b Credits Phat RiO - BlueRock Required privilege...
CVE-2025-49091
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...
CVE-2025-46948
Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
CVE-2025-46913
Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they...
CVE-2025-46875
Adobe Experience Manager versions 6.5.22 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If a low privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...
CVE-2025-47034 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
CVE-2025-46919
CVE-2025-46919 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue is stored Cross-Site Scripting (XSS) in vulnerable form fields, allowing a low-privilege attacker to inject JavaScript that executes in a victim’s browser when visiting the vulnerable page. The cited advi...
CVE-2025-47062
CVE-2025-47062 affects Adobe Experience Manager 6.5.22 and earlier, with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which executes in a victim’s browser when the page is visited (requires user interaction). Remediation is to update to a fixe...
CVE-2025-46889 Adobe Experience Manager | Improper Access Control (CWE-284)
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized elevated access...
CVE-2025-46877 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
CVE-2025-35006
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...