CVE-2025-54309

creationtimestamp| type| source ---|---|--- 2025-07-18 19:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lub77vulfd26 2025-07-18 19:52:43+00:00| seen| https://bsky.app/profile/rapid7.com/post/3lub7vy2f6s2k 2025-07-18 22:24:47+00:00| seen|...

CVE-2025-7795

creationtimestamp| type| source ---|---|--- 2025-07-18 19:10:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lub5lh4b3t2i 2025-07-19 21:00:04+00:00| published-proof-of-concept| Telegram/0jvjkPEZnoW0g8cjJAx2BIIU7bcv6ZLASQZj1TPT87LGFs 2025-07-20 07:00:11+00:00|...

CVE-2025-5992

creationtimestamp| type| source ---|---|--- 2025-07-18 17:52:32+00:00| seen| https://gist.github.com/EbonJaeger/99013e0308373f7313be77f71320c51b...

CVE-2025-53945 apko has incorrect permission (0666) in /etc/ld.so.cache and other files

apko allows users to build and publish OCI container images built from apk packages. Starting in version 0.27.0 and prior to version 0.29.5, critical files were inadvertently set to 0666, which could likely be abused for root escalation. Version 0.29.5 contains a fix for the issue...

CVE-2025-49486

creationtimestamp| type| source ---|---|--- 2025-07-18 12:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luahxpluzu2h...

CVE-2025-6233

creationtimestamp| type| source ---|---|--- 2025-07-18 12:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luah4u4gsk27...

CVE-2025-53997

Missing Authorization vulnerability in favethemes Houzez houzez allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Houzez: from n/a through = 4.0.4...

CVE-2025-6726

creationtimestamp| type| source ---|---|--- 2025-07-18 09:19:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua4kj2xal2i...

CVE-2025-3740

creationtimestamp| type| source ---|---|--- 2025-07-18 06:35:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu7tev2xxm2j 2025-08-11 22:05:38+00:00| published-proof-of-concept| https://t.me/captainsmok3rofficial/68...

WordPress aapanel WP Toolkit plugin 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() Function vulnerability

WordPress aapanel WP Toolkit plugin 1.0 - 1.1 - Missing Authorization to Authenticated Subscriber+ Privilege Escalation via autologin Function vulnerability discovered by kr0d in WordPress Plugin aapanel WP Toolkit versions 1.0 - 1.1...

CVE-2025-7756

creationtimestamp| type| source ---|---|--- 2025-07-18 01:00:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu7anyok7c2w...

CVE-2025-54309

CrushFTP 10 before 10.8.5 and 11 before 11.3.423, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS, as exploited in the wild in July 2025...

CVE-2025-49835

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py openasr function. asrinpdir and a number of other variables takes user input, which is passed to the openasr function, which concatenates the...

CVE-2025-49839

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization vulnerability in bsroformer.py. The modelchoose variable takes user input e.g. a path to a model and passes it to the uvr function. In uvr, a new instance of...

CVE-2025-49840

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization vulnerability in inferencewebui.py. The GPTdropdown variable takes user input and passes it to the changegptweights function. In changegptweights, the user input,...

CVE-2025-53964

creationtimestamp| type| source ---|---|--- 2025-07-17 20:50:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu6snuywtb2i...

CVE-2025-53817

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

CVE-2025-9395406660

creationtimestamp| type| source ---|---|--- 2025-07-17 16:25:53+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lu6dvark2227...

CVE-2025-7339 on-headers vulnerable to http response header manipulation

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...

CVE-2025-50104

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...