23589 matches found
CVE-2025-68044
Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Five Star Restaurant Reservations: from n/a through = 2.7.4...
WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability
Software : Gecko Type : Theme Vulnerable versions : = 1.9.8 OWASP Top 10 : A3: Injection Classification : Local File Inclusion CVE ID : CVE-2025-69080 Patchstack priority : High CVSS severity : 8.1 Required privilege : Unauthenticated Developer : Claim ownership PSID : 0d458b5a65e6 Credits : Tran...
BELL-CVE-2023-54274
Bulletin has no description...
CVE-2025-22194
creationtimestamp| type| source ---|---|--- 2026-01-01 04:35:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbdkj4fr7a2m...
CVE-2025-67704
creationtimestamp| type| source ---|---|--- 2026-01-01 00:52:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd62girln2x 2026-01-02 08:01:30+00:00| seen| https://gist.github.com/Darkcrai86/db1f8fb7d89d85a94d2e504d889a10ca 2026-01-02 18:50:43+00:00| published-proof-of-concept|...
WordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Tran Tuan Dung domiee13 in WordPress Plugin Behance Portfolio Manager versions = 1.7.5...
WordPress Import into Easy Property Listings plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Import into Easy Property Listings versions = 2.2.1...
CVE-2025-15171
creationtimestamp| type| source ---|---|--- 2025-12-29 08:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4g4zhmj32x...
CVE-2025-15129
creationtimestamp| type| source ---|---|--- 2025-12-28 11:04:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb26g73del2q...
WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Shortcodes and extra features for Phlox theme versions = 2.17.15...
CVE-2025-67288
creationtimestamp| type| source ---|---|--- 2025-12-22 19:44:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3malynpgpk32p 2025-12-22 21:47:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mam7j2ikoq2e 2025-12-23 04:04:45+00:00| seen|...
CVE-2025-13220
creationtimestamp| type| source ---|---|--- 2025-12-22 11:35:09+00:00| seen| https://gist.github.com/Darkcrai86/4cde20eae3d34ce50a57634af0b736f6...
CVE-2025-8305
CVE-2025-8305 concerns Check Point Identity Agent for Terminal Services. An authenticated local user can access plaintext debug files that expose sensitive information, enabling the user to claim security policy rules of another user. The root cause is sensitive data printed in plaintext in Ident...
CVE-2025-58934
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes The Gig thegig allows PHP Local File Inclusion.This issue affects The Gig: from n/a through = 1.18.0...
CVE-2025-62961
creationtimestamp| type| source ---|---|--- 2025-12-18 19:32:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabw5hsjla2r...
CVE-2025-68278
Tina is a headless content management system. In tinacms prior to version 3.1.1, tinacms uses the gray-matter package in an insecure way allowing attackers that can control the content of the processed markdown files, e.g., blog posts, to execute arbitrary code. tinacms version 3.1.1, @tinacms/cl...
HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution
Hewlett Packard Enterprise HPE has resolved a maximum-severity security flaw in OneView Software that, if successfully exploited, could result in remote code execution. The critical vulnerability, assigned the CVE identifier CVE-2025-37164 , carries a CVSS score of 10.0. HPE OneView is an IT...
CVE-2025-60053
creationtimestamp| type| source ---|---|--- 2025-12-18 09:52:51+00:00| seen| https://gist.github.com/Darkcrai86/e464d8d154121a71b1db7ccfcf6474e4...