CVE-2025-4867

creationtimestamp| type| source ---|---|--- 2025-05-18 09:41:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgrbxq7ayb2 2025-05-18 13:08:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lph4vdluzh2v...

CVE-2025-4758

A vulnerability classified as critical has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected is an unknown function of the file /contact.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4865

creationtimestamp| type| source ---|---|--- 2025-05-18 08:27:32+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgn4nxhrrb2 2025-05-18 09:13:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgpqrt3rh2l...

CVE-2025-4862

creationtimestamp| type| source ---|---|--- 2025-05-18 06:25:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpggdrj6ian2 2025-05-18 09:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgpqqsaf72w...

CVE-2025-4859

creationtimestamp| type| source ---|---|--- 2025-05-18 05:33:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgddunaven2 2025-05-18 09:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgpqrfafx2l 2025-05-19...

CVE-2025-4860

creationtimestamp| type| source ---|---|--- 2025-05-18 05:33:15+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgddsh66yn2 2025-05-18 09:13:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgpqr6mip2l 2025-05-19...

CVE-2025-4852

creationtimestamp| type| source ---|---|--- 2025-05-18 04:32:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpg7xzunvkn2 2025-05-18 05:08:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgc2cr7c42t 2025-05-19...

CVE-2025-4843

creationtimestamp| type| source ---|---|--- 2025-05-18 00:39:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfszc5tzab2 2025-05-18 01:13:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvqjddh24...

CVE-2025-4730

A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer...

CVE-2025-47930

Zulip is an open-source team chat application. Starting in version 10.0 and prior to version 10.3, the "Who can create public channels" access control mechanism can be circumvented by creating a private or web-public channel, and then changing the channel privacy to public. A similar technique...

CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

CVE-2025-4837

creationtimestamp| type| source ---|---|--- 2025-05-17 22:19:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfl6gvaxdj2 2025-05-18 01:13:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvq74kj2j...

CVE-2025-4918

creationtimestamp| type| source ---|---|--- 2025-05-17 22:19:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfl5r5apqk2 2025-05-18 01:13:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvpzhrk2e 2025-05-18...

CVE-2025-4919

creationtimestamp| type| source ---|---|--- 2025-05-17 22:18:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfl5ildd5j2 2025-05-18 01:13:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvqmyf52p 2025-05-18...

CVE-2023-5934

The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.13 does not have CSRF check in place when importing settings from the v1, which could allow attackers to make a logged in admin update some settings via a CSRF attack...

CVE-2023-7231

The illi Link Party! WordPress plugin through 1.0 lacks proper access controls, allowing unauthenticated visitors to delete links...

CVE-2024-12808

The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting WordPress plugin before 1.13.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the...

CVE-2024-12873

The Custom Field Manager WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12725

The Clasify Classified Listing WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...