CVE-2025-46348

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the request to commence a site backup can be performed and downloaded without authentication. The archives are created with a predictable filename, so a malicious user could create and download an archive without being authenticated...

CVE-2025-3501

creationtimestamp| type| source ---|---|--- 2025-04-29 21:13:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13925 2025-04-29 21:13:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114423313718293003 2025-04-29 21:48:23+00:00| seen|...

CVE-2025-46550 Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the /?BazaR endpoint and idformulaire parameter are vulnerable to cross-site scripting. An attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link...

CVE-2025-46549

YesWiki is a PHP-based wiki. The CVE-2025-46549/YesWiki vulnerability is a reflected cross-site scripting flaw present in YesWiki versions prior to 4.5.4, caused by insufficient sanitization of user input in the template parameter (endpoint: /?BazaR/bazariframe). An attacker can lure an authentic...

CVE-2025-0520 ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...

CVE-2025-4090

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A vulnerability existed in Firefox for Android where potentially sensitive library locations were logged via Logcat...

CVE-2025-4086

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. This bug only affects Firefox for...

CVE-2025-4087

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A vulnerability was identified in Firefox where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access an...

CVE-2025-23181 Ribbon Communications - CWE-250: Execution with Unnecessary Privileges

CWE-250: Execution with Unnecessary Privileges...

CVE-2025-40619

Bookgy does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authentication, to reach private areas and/or areas intended for other roles...

CVE-2025-25962

An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the modifyPosition function...

CVE-2025-4071

creationtimestamp| type| source ---|---|--- 2025-04-29 16:12:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13850 2025-04-29 19:02:24+00:00| published-proof-of-concept| Telegram/obajfcGkagyaYelipu27ZjZPzm4H6vLGDNzjCH6Suk5ZZs 2025-04-29 19:20:30+00:00| seen|...

CVE-2025-23179

CVE-2025-23179 affects Ribbon Communications Apollo 9608 SBC. The issue is a trust management weakness caused by hard-coded credentials (CWE-798). Severity per the CVSS 3.1 entry is MEDIUM (AV: adjacent, AC: low, PR: low, UI: none, S: unchanged, C:L/I:L/A:L). Reported sources consistently describ...

CVE-2025-23178

The CVE-2025-23178 entry corresponds to Ribbon Communications Apollo 9608 SBC with a vulnerability described as CWE-923: Improper Restriction of Communication Channel to Intended Endpoints. Connected sources indicate affected product as Apollo 9608 (appearing in CNNVD and PT-2025-18182); one note...

CVE-2025-23177 Ribbon Communications - CWE-427: Uncontrolled Search Path Element

CWE-427: Uncontrolled Search Path Element...

CVE-2025-4082

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn33qzi42j 2025-04-29 16:49:50+00:00| seen| https://t.me/cvedetector/24005 2025-04-30 07:52:18+00:00| seen|...

CVE-2025-4065

creationtimestamp| type| source ---|---|--- 2025-04-29 15:11:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13841 2025-04-29 15:50:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn33dkpc2a 2025-04-29 18:02:11+00:00| seen|...

CVE-2025-4087

A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10,...

CVE-2025-2817

Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations...

CVE-2025-4093

Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 128.10 and Thunderbird 128.10...