CVE-2025-31638

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeton Spare allows Reflected XSS. This issue affects Spare: from n/a through 1.7...

CVE-2025-39475

Path Traversal: '.../...//' vulnerability in Frenify Arlo arlo allows PHP Local File Inclusion.This issue affects Arlo: from n/a through = 6.0.3...

CVE-2024-22363

creationtimestamp| type| source ---|---|--- 2025-06-11 15:29:00+00:00| seen| https://gist.github.com/EduardoCorpay/fdaeb4ec65cc4a1c8fcd2fb0162de09c...

CVE-2025-49710

creationtimestamp| type| source ---|---|--- 2025-06-11 15:27:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdpulf2dk2m 2025-06-11 20:15:58+00:00| seen| Telegram/nn4r48fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw 2025-06-13 22:36:03+00:00| seen|...

CVE-2025-5986

creationtimestamp| type| source ---|---|--- 2025-06-11 15:22:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdplmts5z2o...

CVE-2025-5687

creationtimestamp| type| source ---|---|--- 2025-06-11 15:12:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdozpv4nw2e 2025-06-14 04:33:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18351 2026-04-13 17:56:13+00:00| seen|...

CVE-2025-49146

pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with channel binding set to required default value is prefer, the driver would incorrectly allow connections to proceed with authentication methods that do not support...

CVE-2025-3473 IBM Security Guardium privilege escalation

IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the program...

CVE-2025-4922

creationtimestamp| type| source ---|---|--- 2025-06-11 14:03:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114665102687441572 2025-06-11 15:28:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdpwewpqt2r...

CVE-2025-4573

creationtimestamp| type| source ---|---|--- 2025-06-11 13:30:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18068 2025-06-11 15:07:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdoqrgcdc2a...

CVE-2025-48053

Discourse is an open-source discussion platform. Prior to version 3.4.4 of the stable branch, version 3.5.0.beta5 of the beta branch, and version 3.5.0.beta6-dev of the tests-passed branch, sending a malicious URL in a PM to a bot user can cause a reduced the availability of a Discourse instance...

CVE-2025-5144 The Events Calendar <= 6.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-’ parameters in all versions up to, and including, 6.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-47950

creationtimestamp| type| source ---|---|--- 2025-06-11 12:17:31+00:00| seen| https://bsky.app/profile/cloud-native.activitypub.awakari.com.ap.brid.gy/post/3lrdf7pspa5i2...

CVE-2025-49710

An integer overflow was present in OrderedHashTable used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4...

CVE-2025-49710

An integer overflow was present in OrderedHashTable used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4...

CVE-2025-41437

Zohocorp ManageEngine OpManager, NetFlow Analyzer, Network Configuration Manager, Firewall Analyzer and OpUtils versions 128565 and below are vulnerable to Reflected XSS on the login page...

CVE-2025-4315

creationtimestamp| type| source ---|---|--- 2025-06-11 10:35:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18064 2025-06-11 11:03:08+00:00| seen| Telegram/NGz98OHuB76pMx88tOKfrQtc8XVIqKfHlr0e5BI3wIw-X8 2025-06-11 11:03:35+00:00| seen| Telegram/buh-ut9DiubPByy1siFNTwRZbQngXllC1XVuRrrneGPkx...

CVE-2025-4128 Mattermost Guest User Information Disclosure Vulnerability

Mattermost versions 10.5.x = 10.5.4, 9.11.x = 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information about public teams they are not members of via a direct API call to /api/v4/teams/teamid...

CVE-2025-41662

Rejected reason: CVE-2025-41662 is considered redundant or unnecessary and thus should be withdrawn. Instead, a new CVE CVE-2025-41687 has been reserved to better reflect the updated analysis...

CVE-2025-5991

creationtimestamp| type| source ---|---|--- 2025-06-11 08:32:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18062 2025-06-11 11:22:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdc653rej23...