CVE-2024-51099

creationtimestamp| type| source ---|---|--- 2025-05-23 17:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpu64bn4wk2y...

CVE-2025-32794

creationtimestamp| type| source ---|---|--- 2025-05-23 17:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpu5uccjt52q 2025-05-23 17:47:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17448 2025-05-23 23:29:58+00:00| seen|...

CVE-2025-20242

A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise CCE could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this...

CVE-2025-46822

OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized...

CVE-2025-24916

creationtimestamp| type| source ---|---|--- 2025-05-23 16:46:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17423 2025-05-23 18:09:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpua2ab7wc2j 2025-05-23 23:29:35+00:00| seen|...

CVE-2025-24917

In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation...

CVE-2025-47640

creationtimestamp| type| source ---|---|--- 2025-05-23 15:49:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpty7qoevk2o 2025-05-23 17:47:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17445...

CVE-2025-48375 Schule Missing Rate Limiting on OTP Email Requests – Susceptible to Abuse & DoS

Schule is open-source school management system software. Prior to version 1.0.1, the file forgotpassword.php or equivalent endpoint responsible for email-based OTP generation lacks proper rate limiting controls, allowing attackers to abuse the OTP request functionality. This vulnerability can be...

CVE-2025-48376 Dnn.Platform's Site Import could use an external source with a crafted request

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser Host could craft a request to use an external url for a site export to then be imported. Version 9.13.9 fixes the issue...

CVE-2025-48283

creationtimestamp| type| source ---|---|--- 2025-05-23 15:29:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptx3wr3zv2s 2025-05-27 14:48:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17650...

CVE-2025-32794 OpenEMR Stored XSS via Patient Name Field in Procedure Orders

OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting XSS vulnerability in versions prior to 7.0.3.4 allows any authenticated user with patient creation privileges to inject arbitrary JavaScript code into the system ...

CVE-2025-47672

creationtimestamp| type| source ---|---|--- 2025-05-23 15:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptvpv3e6f2r 2025-05-23 17:48:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17449...

CVE-2025-47658

creationtimestamp| type| source ---|---|--- 2025-05-23 15:02:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptvlqpqdp2q 2025-05-23 19:44:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17453...

CVE-2025-48287

creationtimestamp| type| source ---|---|--- 2025-05-23 14:46:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17391 2025-05-23 15:07:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptvuehqbx2y...

CVE-2025-5110 FreeFloat FTP Server VERBOSE Command buffer overflow

A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unknown functionality of the component VERBOSE Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2025-47670

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in miniOrange WordPress Social Login and Register miniorange-login-openid allows PHP Local File Inclusion.This issue affects WordPress Social Login and Register: from n/a through =...

CVE-2025-47603

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Belingo belingoGeo belingogeo allows Path Traversal.This issue affects belingoGeo: from n/a through = 1.12.0...

CVE-2025-47512

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in tainacan Tainacan tainacan allows Path Traversal.This issue affects Tainacan: from n/a through = 0.21.14...

CVE-2025-47438

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through = 2.3.1...

CVE-2025-46444

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in scripteo Ads Pro ap-plugin-scripteo allows PHP Local File Inclusion.This issue affects Ads Pro: from n/a through = 4.89...