CVE-2025-1706

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

WordPress Custom Field Manager plugin <= 1.0 - Reflected XSS Vulnerability vulnerability

Reflected XSS Vulnerability vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Custom Field Manager versions = 1.0...

CVE-2025-43714

The CVE-2025-43714 entry concerns OpenAI’s ChatGPT system through 2025-03-30 where SVGs were inline-rendered instead of shown as code, enabling HTML injection in modern browsers. The root cause is the inline rendering of SVG documents (not text blocks). Reported impact is HTML injection; no expli...

CVE-2025-43714

The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents instead of, for example, rendering them as text inside a code block, which enables HTML injection within most modern graphical web browsers...

CVE-2025-43714

The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents instead of, for example, rendering them as text inside a code block, which enables HTML injection within most modern graphical web browsers...

CVE-2025-4900

creationtimestamp| type| source ---|---|--- 2025-05-18 23:37:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16783 2025-05-19 01:13:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpifexkpys2t...

CVE-2025-4891

A vulnerability was found in code-projects Police Station Management System 1.0. It has been classified as critical. Affected is the function criminal::display of the file source.cpp of the component Display Record. The manipulation of the argument N leads to buffer overflow. It is possible to...

CVE-2025-4891

creationtimestamp| type| source ---|---|--- 2025-05-18 19:04:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16768 2025-05-18 19:24:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphruxtfqxe2 2025-05-18...

CVE-2025-4889

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to...

CVE-2025-4887

creationtimestamp| type| source ---|---|--- 2025-05-18 16:54:20+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphjhcduxvo2 2025-05-18 19:04:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16772 2025-05-18...

CVE-2025-31630

Missing Authorization vulnerability in themeton The Business allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Business: from n/a through 1.6.1...

CVE-2025-32290

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Sticky HTML5 Music Player lbg-audio3-html5 allows SQL Injection.This issue affects Sticky HTML5 Music Player: from n/a through = 3.1.6...

CVE-2025-48114

Cross-Site Request Forgery CSRF vulnerability in Shayan Farhang Pazhooh ShayanWeb Admin FontChanger shayanweb-admin-fontchanger allows Stored XSS.This issue affects ShayanWeb Admin FontChanger: from n/a through = 1.9.1...

CVE-2025-48136

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Estatik Mortgage Calculator Estatik estatik-mortgage-calculator allows PHP Local File Inclusion.This issue affects Mortgage Calculator Estatik: from n/a through = 2.0.12...

CVE-2025-48219

creationtimestamp| type| source ---|---|--- 2025-05-18 15:55:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphg6x3gvoy2 2025-05-18 17:12:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lphkjybdj52h 2025-05-19...

CVE-2025-4882

creationtimestamp| type| source ---|---|--- 2025-05-18 14:20:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphaw3kc4q72 2025-05-18 17:12:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lphkjy6c3g2w...

CVE-2025-4870

creationtimestamp| type| source ---|---|--- 2025-05-18 11:31:15+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgxgldqb2k2 2025-05-18 13:08:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lph4vdvngr2w 2025-05-19...

CVE-2025-4871

creationtimestamp| type| source ---|---|--- 2025-05-18 11:30:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgxg7eradk2 2025-05-18 13:08:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lph4vdzdno2n 2025-05-19...

CVE-2025-4869

creationtimestamp| type| source ---|---|--- 2025-05-18 11:30:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgxfyt2dcp2 2025-05-18 13:08:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lph4veacdr2p...

CVE-2025-4868

creationtimestamp| type| source ---|---|--- 2025-05-18 09:41:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgrd7fnjko2 2025-05-18 13:08:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lph4vegxpl2t...