CVE-2024-12718

creationtimestamp| type| source ---|---|--- 2025-06-03 13:20:14+00:00| seen| https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f 2025-06-03 14:03:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqphcvqawfy2 2025-06-09...

CVE-2025-4138

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

CVE-2025-4205

The CVE-2025-4205 entry concerns the WordPress Popup Maker plugin. A stored cross-site scripting vulnerability exists via the popupID parameter in all versions up to and including 1.20.4, caused by insufficient input sanitization and output escaping. Consequences stated: authenticated attackers w...

CVE-2025-4671

CVE-2025-4671 affects the WordPress Profile Builder plugin for WordPress, versions up to and including 3.13.8. The root cause is insufficient input sanitization and output escaping on user_meta and compare shortcodes, enabling Stored Cross-Site Scripting (XSS). Exploitation requires authenticated...

CVE-2025-5492

creationtimestamp| type| source ---|---|--- 2025-06-03 11:15:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqp5yksz6xj2...

CVE-2025-1725

creationtimestamp| type| source ---|---|--- 2025-06-03 09:27:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxt2zripi2 2025-06-03 13:00:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpdwg54sw2q...

CVE-2025-5103

creationtimestamp| type| source ---|---|--- 2025-06-03 09:27:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxsqf2jwi2 2025-06-03 12:45:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpd3koris2m...

CVE-2025-4420

creationtimestamp| type| source ---|---|--- 2025-06-03 09:27:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxsxgnirt2...

CVE-2025-27811

creationtimestamp| type| source ---|---|--- 2025-06-03 09:14:27+00:00| seen| https://gist.github.com/leonjza/829a98f6c0954d7cb3f6614d05f87f37 2025-06-04 15:13:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqs3rujlhqx2 2025-06-04...

CVE-2025-31711

creationtimestamp| type| source ---|---|--- 2025-06-03 09:11:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqox4mjnye2e...

CVE-2025-1725 Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it...

Security Bulletin: IBM Engineering Systems Design Rhapsody affected by CVE-2024-47554

Summary commons-io-2.11.0.jar was vulnerable and IBM Engineering Systems Design Rhapsodyhas upgraded JAR to 2.14.0. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class m...

CVE-2025-41428

TimeWorks CVE-2025-41428 affects the web server module in TimeWorks versions 10.0–10.3, with a path traversal (CWE-22) flaw that can allow a remote unauthenticated attacker to view arbitrary JSON files on the server. Root cause: improper limitation of a pathname to a restricted directory. Public ...

CVE-2025-45855

creationtimestamp| type| source ---|---|--- 2025-06-03 06:24:06+00:00| seen| https://gist.github.com/Cafe-Tea/b72d442be434e1dafe7810c938892b06 2025-06-03 14:52:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpk5x67hdy2 2025-06-03...

CVE-2025-21486

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...

CVE-2025-21463

Transient DOS while processing the EHT operation IE in the received beacon frame...

CVE-2024-53017

Memory corruption while handling test pattern generator IOCTL command...

CVE-2024-53013

Memory corruption may occur while processing voice call registration with user...

CVE-2025-3662

creationtimestamp| type| source ---|---|--- 2025-06-03 06:11:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqomzodwem22 2025-06-03 09:16:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqoxfkxrtb2o...

CVE-2025-31712

creationtimestamp| type| source ---|---|--- 2025-06-03 06:11:16+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqomzi3npvm2 2025-06-03 08:45:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqovnfiyn32q...