23607 matches found
CVE-2025-49710
creationtimestamp| type| source ---|---|--- 2025-06-11 15:27:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdpulf2dk2m 2025-06-11 20:15:58+00:00| seen| Telegram/nn4r48fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw 2025-06-13 22:36:03+00:00| seen|...
CVE-2025-5986
creationtimestamp| type| source ---|---|--- 2025-06-11 15:22:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdplmts5z2o...
CVE-2025-5687
creationtimestamp| type| source ---|---|--- 2025-06-11 15:12:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdozpv4nw2e 2025-06-14 04:33:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18351 2026-04-13 17:56:13+00:00| seen|...
CVE-2025-49146
pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with channel binding set to required default value is prefer, the driver would incorrectly allow connections to proceed with authentication methods that do not support...
CVE-2025-3473 IBM Security Guardium privilege escalation
IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the program...
CVE-2025-4922
creationtimestamp| type| source ---|---|--- 2025-06-11 14:03:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114665102687441572 2025-06-11 15:28:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdpwewpqt2r...
CVE-2025-4573
creationtimestamp| type| source ---|---|--- 2025-06-11 13:30:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18068 2025-06-11 15:07:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdoqrgcdc2a...
CVE-2025-48053
Discourse is an open-source discussion platform. Prior to version 3.4.4 of the stable branch, version 3.5.0.beta5 of the beta branch, and version 3.5.0.beta6-dev of the tests-passed branch, sending a malicious URL in a PM to a bot user can cause a reduced the availability of a Discourse instance...
CVE-2025-5144 The Events Calendar <= 6.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-’ parameters in all versions up to, and including, 6.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-47950
creationtimestamp| type| source ---|---|--- 2025-06-11 12:17:31+00:00| seen| https://bsky.app/profile/cloud-native.activitypub.awakari.com.ap.brid.gy/post/3lrdf7pspa5i2...
CVE-2025-49710
An integer overflow was present in OrderedHashTable used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4...
CVE-2025-49710
An integer overflow was present in OrderedHashTable used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4...
CVE-2025-41437
Zohocorp ManageEngine OpManager, NetFlow Analyzer, Network Configuration Manager, Firewall Analyzer and OpUtils versions 128565 and below are vulnerable to Reflected XSS on the login page...
CVE-2025-4315
creationtimestamp| type| source ---|---|--- 2025-06-11 10:35:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18064 2025-06-11 11:03:08+00:00| seen| Telegram/NGz98OHuB76pMx88tOKfrQtc8XVIqKfHlr0e5BI3wIw-X8 2025-06-11 11:03:35+00:00| seen| Telegram/buh-ut9DiubPByy1siFNTwRZbQngXllC1XVuRrrneGPkx...
CVE-2025-4128 Mattermost Guest User Information Disclosure Vulnerability
Mattermost versions 10.5.x = 10.5.4, 9.11.x = 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information about public teams they are not members of via a direct API call to /api/v4/teams/teamid...
CVE-2025-41662
Rejected reason: CVE-2025-41662 is considered redundant or unnecessary and thus should be withdrawn. Instead, a new CVE CVE-2025-41687 has been reserved to better reflect the updated analysis...
CVE-2025-5991
creationtimestamp| type| source ---|---|--- 2025-06-11 08:32:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18062 2025-06-11 11:22:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdc653rej23...
CVE-2025-29756
SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser. The MQTT server however did not have sufficient restrictions in place to limit the topics that a user could subscribe to. While...
CVE-2025-5958
A use-after-free vulnerability has been identified in the Chromium Media component. This flaw allows a remote attacker to trigger heap corruption by enticing a user to interact with a specially crafted HTML page. Successful exploitation of this vulnerability can enable an attacker to manipulate...