CVE-2025-48945

creationtimestamp| type| source ---|---|--- 2025-06-20 22:17:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls32xtf4sd2m 2025-06-23 10:52:45+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lsbg3gzerk2h...

CVE-2025-34022

creationtimestamp| type| source ---|---|--- 2025-06-20 22:04:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls32asqvqg2p 2025-06-21 21:02:20+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7no4eb2i 2025-06-22 01:29:32+00:00| seen|...

CVE-2025-25037

creationtimestamp| type| source ---|---|--- 2025-06-20 22:02:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls324ddez72m 2025-06-21 21:02:18+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7ngo6k2u 2025-06-23 20:47:21+00:00| published-proof-of-concept|...

CVE-2025-34024

creationtimestamp| type| source ---|---|--- 2025-06-20 21:50:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2zhacfsy23 2025-06-21 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7ntq752e 2025-06-30 20:27:00+00:00| seen|...

CVE-2025-6365

creationtimestamp| type| source ---|---|--- 2025-06-20 20:44:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19063 2025-06-20 21:58:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2zudqsab2m...

CVE-2025-48945

pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...

CVE-2025-34030

An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. The application fails to sanitize user-supplied input before using it in a system-level context. Remote, unauthenticated attackers can inject shell commands by appending them to t...

CVE-2025-4976

creationtimestamp| type| source ---|---|--- 2025-06-20 18:53:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114717202753199427 2025-07-24 06:41:24+00:00| seen| https://bsky.app/profile/potato.software/post/3luowin6wuo2y...

CVE-2025-34024

The CVE-2025-34024 affects Edimax EW-7438RPn firmware versions 1.13 and earlier, with an OS command injection via the /goform/mp endpoint’s command parameter in the mp.asp form handler. The root cause is improper handling of user-supplied input to that command parameter, enabling an authenticated...

CVE-2025-34021

The CVE-2025-34021 affects Selea Targa IP OCR-ANPR cameras (iZero, Targa 512, 504, Semplice, 704 TKM, 805, 710 INOX, 750, 704 ILB). Root cause: unvalidated JSON POST fields ipnotify_address and url used for image fetch/DNS checks, enabling an SSRF. Impact: remote unauthenticated attackers can for...

GHSA-G3QG-6746-3MG9

creationtimestamp| type| source ---|---|--- 2025-06-20 17:46:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19015...

CVE-2025-6357 code-projects Simple Pizza Ordering System paymentportal.php sql injection

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /paymentportal.php. The manipulation of the argument person leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-48059

PowSyBl Power System Blocks is a framework to build power system oriented software. In com.powsybl:powsybl-iidm-criteria versions 6.3.0 to before 6.7.2 and com.powsybl:powsybl-contingency-api versions 5.0.0 to before 6.3.0, there is a a potential polynomial Regular Expression Denial of Service...

CVE-2025-5416

creationtimestamp| type| source ---|---|--- 2025-06-20 16:45:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19002 2025-06-20 20:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2u7rxbu72r...

CVE-2025-52825

creationtimestamp| type| source ---|---|--- 2025-06-20 16:17:11+00:00| seen| Telegram/jX3P-npZhepmJEJEvfrnYKXIW1DnkYbd7t33-vEA6eRgmU 2025-06-20 17:13:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2jwwgwvn2m 2025-06-23 16:47:12+00:00| published-proof-of-concept|...

CVE-2025-45331

brplot v420.69.1 contains a Null Pointer Dereference NPD vulnerability in the brdagenshandleonce function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes...

CVE-2025-6347

creationtimestamp| type| source ---|---|--- 2025-06-20 15:44:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18982 2025-06-20 19:52:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2sucldla2m...

CVE-2025-6346

A vulnerability was found in SourceCodester Advance Charity Management System 1.0. It has been classified as critical. This affects an unknown part of the file /members/fundDetails.php. The manipulation of the argument m06 leads to sql injection. It is possible to initiate the attack remotely. Th...

CVE-2025-49990

Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Contentstudio: from n/a through = 1.3.7...

CVE-2025-49977

Cross-Site Request Forgery CSRF vulnerability in WP Inventory WP Inventory Manager wp-inventory-manager allows Cross Site Request Forgery.This issue affects WP Inventory Manager: from n/a through = 2.3.4...