23596 matches found
CVE-2025-4687
creationtimestamp| type| source ---|---|--- 2025-05-29 10:08:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqchx2t7owv2 2025-05-29 12:11:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqcotypviq2a...
CVE-2025-48388
Freescout, a PHP/Laravel-based open‑source helpdesk, is affected by a CRLF‑injection style vulnerability in versions before 1.8.178. Root cause: insufficient validation of user‑supplied data used as arguments to string formatting functions, allowing input containing \r, \n, or \t. The issue is pa...
CVE-2025-4670
CVE-2025-4670 affects the WordPress plugin “Easy Digital Downloads – eCommerce Payments and Subscriptions” up to version 3.3.8.1. The vulnerability is a Stored Cross-Site Scripting flaw in the edd_receipt shortcode caused by insufficient input sanitization and output escaping on user-supplied att...
CVE-2025-5276
creationtimestamp| type| source ---|---|--- 2025-05-29 06:26:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqc3jiyvlto2 2025-05-29 09:46:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqcgqhvsjq2a...
CVE-2025-5273
creationtimestamp| type| source ---|---|--- 2025-05-29 06:26:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqc3jisodmv2 2025-05-29 09:36:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqcg6kqof62s...
CVE-2025-5273
Versions of the package mcp-markdownify-server before 1.0.0 are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the...
CVE-2025-48742
The installer in SIGB PMB before and fixed in v.8.0.1.2 allows remote code execution...
CVE-2024-51392
An issue in OpenKnowledgeMaps Headstart v7 allows a remote attacker to escalate privileges via the url parameter of the getPDF.php component...
CVE-2024-51392
An issue in OpenKnowledgeMaps Headstart v7 allows a remote attacker to escalate privileges via the url parameter of the getPDF.php component...
CVE-2024-22654
tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c...
CVE-2024-22654
tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c...
CVE-2024-53423
An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...
CVE-2025-5054
Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...
WordPress Smash Balloon Instagram Feed plugin <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-plugin` Attribute vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via data-plugin Attribute vulnerability discovered by Asaf Mozes in WordPress Plugin Instagram Feed versions = 6.9.0...
CVE-2025-48926
creationtimestamp| type| source ---|---|--- 2025-05-28 18:40:13+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lqau3iu2ea24 2025-07-01 20:09:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20082...
CVE-2025-31501
creationtimestamp| type| source ---|---|--- 2025-05-28 18:24:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat7hbo4h42...
CVE-2025-5256
creationtimestamp| type| source ---|---|--- 2025-05-28 18:24:13+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat6oa4b3p2 2025-05-30 22:14:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqgaytbtac2o...
CVE-2025-48929
creationtimestamp| type| source ---|---|--- 2025-05-28 18:14:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114586815688198231 2025-05-28 21:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lqb65hklr624 2025-07-01 20:09:44+00:00| seen|...