CVE-2025-47350

Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application...

CVE-2025-14833 code-projects Online Appointment Booking System deletemanagerclinic.php sql injection

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

CVE-2025-40602

creationtimestamp| type| source ---|---|--- 2025-12-17 14:42:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115735431932943323 2025-12-17 17:17:00+00:00| seen| https://thehackernews.com/2025/12/sonicwall-fixes-actively-exploited-cve.html 2025-12-17 17:50:27+00:00| seen|...

CVE-2025-68287

A use-after-free vulnerability was found in the DWC3 USB controller driver in the Linux kernel. Multiple unsynchronized execution paths can invoke dwc3removerequests concurrently, leading to premature freeing of USB requests. When one path frees requests while another is still processing them, a...

CVE-2025-64246

creationtimestamp| type| source ---|---|--- 2025-12-16 09:49:46+00:00| seen| https://gist.github.com/Darkcrai86/66d8d19b606d711d23691c014b0e88b7...

CVE-2025-46276

creationtimestamp| type| source ---|---|--- 2025-12-12 23:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7tbbjydkl2e 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83...

CVE-2025-43518

creationtimestamp| type| source ---|---|--- 2025-12-12 23:10:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7t7jd5qgs2y 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83...

CVE-2025-14565

creationtimestamp| type| source ---|---|--- 2025-12-12 20:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7svflvolj22...

CVE-2025-13733 BuhoNTFS 1.3.2 - Local Privilege Escalation

BuhoNTFS contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoNTFS: 1.3.2...

WordPress Simple Bike Rental plugin <= 1.0.6 - Missing Authorization to Authenticated (Subscriber+) Sensitive Booking Data Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Booking Data Exposure vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Simple Bike Rental versions = 1.0.6...

CVE-2025-67646

creationtimestamp| type| source ---|---|--- 2025-12-11 03:33:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7onazrqon2e...

CVE-2025-65950

creationtimestamp| type| source ---|---|--- 2025-12-11 02:33:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/115698592269763188 2025-12-11 02:33:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7ojwg4fls2m...

CVE-2023-53773

creationtimestamp| type| source ---|---|--- 2025-12-10 00:00:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lqvyw5p32c...

CVE-2025-65754

CVE-2025-65754 concerns Algernon v1.17.4, where cross-site scripting via a crafted payload in a filename can lead to arbitrary code execution. Multiple sources confirm the issue exists in Algernon, with CVSS-like context indicating attacker interaction and limited privileges. Reported affected co...

CVE-2025-63009

creationtimestamp| type| source ---|---|--- 2025-12-09 15:43:20+00:00| seen| https://gist.github.com/Darkcrai86/9e9195b1bb38a0d0e314c50d5f60ab8a...

CVE-2025-40342

No description is available for this CVE...

BELL-CVE-2025-40304

Bulletin has no description...

CVE-2025-14206

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

CVE-2025-65799

creationtimestamp| type| source ---|---|--- 2025-12-08 20:07:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7itft5fmw2s...

CVE-2025-48601

In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...