CVE-2025-48481

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, an attacker with an unactivated email invitation containing invitehash, can exploit this vulnerability to self-activate their account, despite it being blocked or deleted, by leveraging the invitation link fro...

CVE-2025-48381

Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. In versions starting from 2.4.0 to before 2.38.0, an authenticated CVAT user may be able to retrieve the IDs and names of all tasks, projects, labels, and the IDs of all jobs and quality...

CVE-2025-44619

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication...

CVE-2025-31263

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to corrupt coprocessor memory...

CVE-2025-4967

Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections...

CVE-2025-48336

Deserialization of Untrusted Data vulnerability in ThimPress Course Builder course-builder allows Object Injection.This issue affects Course Builder: from n/a through 3.6.6...

CVE-2025-5389

creationtimestamp| type| source ---|---|--- 2025-05-31 19:34:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqiiji4ra4e2 2025-05-31 21:57:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqiqitzccm2e...

CVE-2025-5388

A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the file /generateController.do?dogenerate. The manipulation leads to sql injection. The attack can be launched remotely. This product takes the approach of...

CVE-2025-5386

creationtimestamp| type| source ---|---|--- 2025-05-31 17:23:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqiazeuw5fg2 2025-05-31 18:31:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqieylnevh2e...

CVE-2025-5384

creationtimestamp| type| source ---|---|--- 2025-05-31 16:24:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqi5ughhzav2 2025-05-31 18:16:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqie5poqvw2r...

CVE-2025-48472

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabling notifications for the mailbox to which they already have access. Moreover, the code explicitly implements functionality that if the user does not have...

CVE-2025-5379

creationtimestamp| type| source ---|---|--- 2025-05-31 14:21:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqhx242q5rv2 2025-05-31 18:21:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqiegocmsj27...

CVE-2025-5376

creationtimestamp| type| source ---|---|--- 2025-05-31 12:04:59+00:00| seen| https://bsky.app/profile/potato.software/post/3lqhpfk2yg22m 2025-05-31 13:32:40+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqhu7end27u2...

CVE-2025-4691

creationtimestamp| type| source ---|---|--- 2025-05-31 11:40:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqho24w4kaj2 2025-05-31 14:16:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhwrfmab42s...

CVE-2025-5375

creationtimestamp| type| source ---|---|--- 2025-05-31 11:13:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqhmiqo6fqu2...

CVE-2025-5371

creationtimestamp| type| source ---|---|--- 2025-05-31 08:41:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqhdxyl27ou2...

CVE-2025-3813 Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementordata’ parameter in all versions up to, and including, 1.7.1020 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

CVE-2025-4672

The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization placed on the permissioncallback function in versions 2.2.1 to 2.15.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to read, create,...

CVE-2025-4607

The PSW Front-end Login & Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12 via the customerregistration function. This is due to the use of a weak, low-entropy OTP mechanism in the forget function. This makes it possible for...

CVE-2025-4672

creationtimestamp| type| source ---|---|--- 2025-05-31 07:12:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqh6zoqbpi42 2025-05-31 09:27:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhglxhhl42e...