CVE-2025-6818

creationtimestamp| type| source ---|---|--- 2025-06-28 15:53:53+00:00| seen| https://bsky.app/profile/potato.software/post/3lsojalx6jx2h 2025-06-28 15:55:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19823 2025-06-28 18:24:53+00:00| seen|...

CVE-2025-6817

creationtimestamp| type| source ---|---|--- 2025-06-28 11:54:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19809 2025-06-28 14:19:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsodyp3k352k...

CVE-2025-3771

A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files, which can potentially cause a system crash. This was achieved by adding a malicious entry to the registry under the...

CVE-2025-6816

A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5Ofsinfoencode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to...

CVE-2025-5937

creationtimestamp| type| source ---|---|--- 2025-06-28 07:51:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19808 2025-06-28 10:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnyav4pla2s...

CVE-2025-53380

creationtimestamp| type| source ---|---|--- 2025-06-28 04:39:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsndkghnuv2p...

CVE-2025-6776

A vulnerability classified as critical was found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This vulnerability affects the function Upload of the file app/plugins/oss/app/controller.py of the component File Upload. The manipulation of the argument image leads to path traversal. The attack can b...

CVE-2025-52207

creationtimestamp| type| source ---|---|--- 2025-06-27 19:40:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmfg7nrju25 2025-09-19 21:02:38+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz7r6tpujy23 2025-12-02 21:02:37+00:00| seen|...

CVE-2025-53093 TabberNeue vulnerable to Stored XSS through wikitext

TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the tag. Version 3.1.1 contains a patch for the bug...

CVE-2025-52207

PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory...

CVE-2025-46708

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU...

CVE-2025-53091

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in version 3.3.3 the almox parameter of the /controle/getProdutosPorAlmox.php endpoint. This issue allows any unauthenticated...

CVE-2025-52817

creationtimestamp| type| source ---|---|--- 2025-06-27 15:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lslwccrq522i...

CVE-2025-52818

creationtimestamp| type| source ---|---|--- 2025-06-27 14:50:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lslv7rx7os2r...

CVE-2025-52991

The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data...

CVE-2025-52991

The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data...

CVE-2025-53327 WordPress Aioseo Multibyte Descriptions plugin <= 0.0.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ruimashita Aioseo Multibyte Descriptions aioseo-multibyte-descriptions allows Cross Site Request Forgery.This issue affects Aioseo Multibyte Descriptions: from n/a through = 0.0.6...

CVE-2025-53320 WordPress Free Downloads EDD plugin <= 1.0.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wp Enhanced Free Downloads EDD allows DOM-Based XSS. This issue affects Free Downloads EDD: from n/a through 1.0.4...

CVE-2025-53257

CVE-2025-53257 affects Gmedia Photo Gallery (WordPress plugin) and is an Unauthenticated Local File Inclusion via improper control of filename for include/require in PHP. Affected versions are 1.23.0 and earlier. The vulnerability is categorized as PHP Local File Inclusion (LFI) and is reported w...

CVE-2025-53257 WordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows PHP Local File Inclusion.This issue affects Gmedia Photo Gallery: from n/a through = 1.23.0...