CVE-2025-42962 Cross-Site Scripting (XSS) vulnerability in SAP Business Warehouse (Business Explorer Web 3.5 loading animation)

SAP Business Warehouse Business Explorer Web allows an attacker to create a malicious link. If an authenticated user clicks on this link, the injected script gets executed within the scope of victim�s browser. This potentially leads to an impact on confidentiality and integrity. Availability is n...

PT-2025-28423 · Undefined · Undefined

CVE-2025-53614 Rejected reason https://t.co/vTaxcxo1bh...

PT-2025-28424 · Undefined · Undefined

CVE-2025-53615 Rejected reason https://t.co/8Lmn9NEBkt Vulnerability Notification: https://t.co/xhLrNnfyrO...

PT-2025-28426 · Undefined · Undefined

CVE-2025-53617 Rejected reason https://t.co/4W7JtMJDzr...

CVE-2025-53495

creationtimestamp| type| source ---|---|--- 2025-07-07 23:56:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltfyfq5q6m25...

CVE-2025-7142

creationtimestamp| type| source ---|---|--- 2025-07-07 23:32:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltfx23ptrf2y...

CVE-2025-20300

creationtimestamp| type| source ---|---|--- 2025-07-07 20:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltflt3tos42f...

CVE-2024-37657

creationtimestamp| type| source ---|---|--- 2025-07-07 19:22:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltfj3arpgx2w...

CVE-2025-20321

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.114, and 9.2.2406.119, an unauthenticated attacker can send a specially-crafted SPL search that could change the membership state in a Splunk Search Head Cluster SHC...

CVE-2025-53530

WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HTTP GET requests to a specific URL. This issue arises from the lack of validation for the length of the errorstr parameter. Tests confirmed that the server processes URLs up to...

CVE-2024-25178

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in ljstate.c...

CVE-2025-53376 Dokploy allows attackers to run arbitrary OS commands on the Dokploy host.

Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated, low-privileged user can run arbitrary OS commands on the Dokploy host. The tRPC procedure docker.getContainersByAppNameMatch interpolates the...

CVE-2025-53373 Natours has a 1 Click Account take over on reset password via Host Header injection

Natours is a Tour Booking API. The attacker can easily take over any victim account by injecting an attacker-controlled server domain in the Host header when requesting the /forgetpassword endpoint. This vulnerability is fixed with commit 7401793a8d9ed0f0c250c4e0ee2815d685d7a70b...

CVE-2023-51232

creationtimestamp| type| source ---|---|--- 2025-07-07 15:17:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltf3g435f72u...

CVE-2025-6805

Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The...

CVE-2025-5924

creationtimestamp| type| source ---|---|--- 2025-07-07 15:14:14+00:00| seen| Telegram/ISXgwPdrIpRTPMpLikF2rIbDIPtvkDdpffH6-8WgNXxkQ...

CVE-2025-6712 MongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation

MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition is linked to inefficiencies in memory management related to internal operations. In scenarios where certain internal processes persist longer than anticipated, memory...

CVE-2025-3467

creationtimestamp| type| source ---|---|--- 2025-07-07 11:24:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lteoeysjn22r...

CVE-2025-53171

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

CVE-2025-6812

creationtimestamp| type| source ---|---|--- 2025-07-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-473/ 2025-07-25 09:01:28+00:00| seen| https://bsky.app/profile/neodyme.io/post/3lurorz42sk2n...