CVE-2025-28382

creationtimestamp| type| source ---|---|--- 2025-06-13 15:25:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114676749186057555 2025-06-13 17:05:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriwb7srzh2p...

CVE-2025-6030

CVE-2025-6030 concerns the Cyclone Matrix TRF Smart Keyless Entry System’s Key Fob Transmitter, where the use of fixed learning codes enables a replay attack. The issue affects Cyclone Matrix TRF-based keyless systems and was demonstrated on a 2024 Kia Soluto, with reports of attacks on other Kia...

CVE-2025-45988

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bsSetCmd function...

CVE-2024-38824

Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory...

CVE-2025-29756

SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser. The MQTT server however did not have sufficient restrictions in place to limit the topics that a user could subscribe to. While t...

CVE-2025-5923

creationtimestamp| type| source ---|---|--- 2025-06-13 07:33:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18280 2025-06-13 11:49:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrielodf5g2m...

CVE-2025-22236

creationtimestamp| type| source ---|---|--- 2025-06-13 07:28:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhvvbpjhex2 2025-06-13 07:33:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18277 2025-06-13 07:34:25+00:00| seen|...

CVE-2025-45786

creationtimestamp| type| source ---|---|--- 2025-06-13 07:24:40+00:00| seen| https://gist.github.com/0xKunAlx0/a80bc7ec5acb2f19daa36257fedbcf11 2025-06-18 14:41:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18751 2025-06-18 15:31:20+00:00| published-proof-of-concept|...

CVE-2025-22239

Arbitrary event injection on Salt Master. The master's "minionevent" method can be used by and authorized minion to send arbitrary events onto the master's event bus...

CVE-2025-22237

An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on the master with the same privileges as the master process...

CVE-2024-38822

Multiple methods in the salt master skip minion token validation. Therefore a misbehaving minion can impersonate another minion...

CVE-2025-22240

Arbitrary directory creation or file deletion. In the findfile method of the GitFS class, a path is created using os.path.join using unvalidated input from the “tgtenv” variable. This can be exploited by an attacker to delete any file on the Master's process has permissions to...

CVE-2024-38822

creationtimestamp| type| source ---|---|--- 2025-06-13 06:58:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhuc33qatx2 2025-06-13 07:33:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18281 2025-06-13 11:38:24+00:00| seen|...

CVE-2024-38825

creationtimestamp| type| source ---|---|--- 2025-06-13 06:57:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhubrvh2j72 2025-06-13 07:33:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18278 2025-06-13 11:12:00+00:00| seen|...

CVE-2024-38823

creationtimestamp| type| source ---|---|--- 2025-06-13 06:57:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhubsb4puj2 2025-06-13 07:33:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18279 2025-06-13 12:08:44+00:00| seen|...

CVE-2024-38822

CVE-2024-38822 concerns Salt (Salt Master/Minion interaction): multiple methods in the Salt master skip minion token validation, enabling a misbehaving minion to impersonate another. Evidence from connected advisories shows patches fixing Minion token validation and related Salt issues (e.g., SUS...

CVE-2025-5282

creationtimestamp| type| source ---|---|--- 2025-06-13 04:34:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18259 2025-06-13 05:25:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhp5tpg2a2k 2025-06-13 09:23:06+00:00| seen|...

CVE-2025-5841

creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18251 2025-06-13 05:30:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhpgs6cax2s...

CVE-2025-5928

CVE-2025-5928 : The WP Sliding Login/Dashboard Panel plugin for WordPress (versions ≤ 2.1.1) is reported vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation in the wp_sliding_panel_user_options() function. This enables unauthenticated attackers to update plugin s...

CVE-2025-4586 IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmcalendarview' Shortcode

The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmcalendarview' shortcode in all versions up to, and including, 1.2.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...