CVE-2025-50142

creationtimestamp| type| source ---|---|--- 2025-06-14 07:46:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkhhnht4w2r...

CVE-2025-5487

creationtimestamp| type| source ---|---|--- 2025-06-14 07:31:16+00:00| seen| Telegram/EBVgSt7wdJnZGFN9mjaTpNjNL5ZnfETU-XEnqrbYo0IQesw 2025-06-14 07:37:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18358 2025-06-14 09:21:45+00:00| seen|...

CVE-2025-50143

creationtimestamp| type| source ---|---|--- 2025-06-14 07:31:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkgms3l2q2u...

CVE-2025-3234

creationtimestamp| type| source ---|---|--- 2025-06-14 06:31:02+00:00| seen| Telegram/VYwOw1FgS2rdituN2tqfuXTl8dguJ6e02sBRJ2-I5qUtm7g 2025-06-14 06:35:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18357 2025-06-14 09:16:45+00:00| seen|...

CVE-2025-6059

CVE-2025-6059 affects the WordPress plugin Seraphinite Accelerator (versions up to and including 2.27.21). The vulnerability is a Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation in the function named OnAdminApi_CacheOpBegin. This flaw allows unauthenticated attacker...

CVE-2025-33108

CVE-2025-33108 affects IBM Backup, Recovery and Media Services for i versions 7.4 and 7.5. A BRMS program calling an unqualified library can allow a user with the capability to compile or restore a program to execute user-controlled code with host OS component access, enabling elevated privileges...

CVE-2025-24919

creationtimestamp| type| source ---|---|--- 2025-06-13 22:37:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18347 2025-06-13 23:14:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrjkueqdv52r 2025-08-06 13:05:54+00:00| seen|...

CVE-2025-6083

In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the ownerid filter. This issue may allow users to search data across the entire table instead of being restricted to their specific ownerid...

CVE-2025-49598 conda-forge-ci-setup Allows Arbitrary Code Execution via Insecure Version Parsing

conda-forge-ci-setup is a package installed by conda-forge each time a build is run on CI. The conda-forge-ci-setup-feedstock setup script is vulnerable due to the unsafe use of the eval function when parsing version information from a custom-formatted meta.yaml file. An attacker controlling...

CVE-2025-49597

handcraftedinthealps goodby-csv is a highly memory efficient, flexible and extendable open-source CSV import/export library. Prior to 1.4.3, goodby-csv could be used as part of a chain of methods that is exploitable when an insecure deserialization vulnerability exists in an application. This...

CVE-2025-49597 handcraftedinthealps goodby-csv Potential Gadget Chain allowing Remote Code Execution

handcraftedinthealps goodby-csv is a highly memory efficient, flexible and extendable open-source CSV import/export library. Prior to 1.4.3, goodby-csv could be used as part of a chain of methods that is exploitable when an insecure deserialization vulnerability exists in an application. This...

CVE-2025-49582

creationtimestamp| type| source ---|---|--- 2025-06-13 17:38:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18321 2025-06-13 18:01:53+00:00| published-proof-of-concept| Telegram/BdAJvjHyhFMVsKfZl02ptmuMNqjhviASPolesySVDo2DxO4 2025-06-13 21:42:18+00:00| seen|...

CVE-2024-38823

Salt's request server is vulnerable to replay attacks when not using a TLS encrypted transport. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to...

CVE-2025-48917

creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18319 2025-06-13 17:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriwp6kbhv25...

CVE-2025-48916

Missing Authorization vulnerability in Drupal Bookable Calendar allows Forceful Browsing.This issue affects Bookable Calendar: from 0.0.0 before 2.2.13...

CVE-2025-36631

creationtimestamp| type| source ---|---|--- 2025-06-13 16:08:29+00:00| seen| Telegram/Fw0XBy1WaCOjxg2mWHXnG8lWV81E0IbizYC1ykRJG5IGg 2025-06-13 17:18:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriwxsddv523 2025-06-16 14:02:08+00:00| seen|...

CVE-2025-49580 XWiki allows privilege escalation through link refactoring

XWiki is a generic wiki platform. From 8.2 and 7.4.5 until 17.1.0-rc-1, 16.10.4, and 16.4.7, pages can gain script or programming rights when they contain a link and the target of the link is renamed or moved. This might lead to execution of scripts contained in xobjects that should have never be...

CVE-2025-6052 Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be writte...

CVE-2025-48917 EU Cookie Compliance (GDPR Compliance) - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-072

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal EU Cookie Compliance GDPR Compliance allows Cross-Site Scripting XSS.This issue affects EU Cookie Compliance GDPR Compliance: from 0.0.0 before 1.26.0...

CVE-2025-48918 Simple Klaro - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-071

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Simple Klaro allows Cross-Site Scripting XSS.This issue affects Simple Klaro: from 0.0.0 before 1.10.0...