CVE-2025-27818

creationtimestamp| type| source ---|---|--- 2025-06-09 13:04:22+00:00| seen| https://seclists.org/oss-sec/2025/q2/236 2025-06-09 15:24:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lr6oqv6nhm2m 2025-06-10 08:32:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17840...

CVE-2025-41444

creationtimestamp| type| source ---|---|--- 2025-06-09 12:01:36+00:00| seen| Telegram/bTJ9s6Dm5c98HBwnHhlVxkUI4b7kIVaieHQvre00jyC9A 2025-06-09 12:36:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114653436896870669 2025-06-09 15:17:15+00:00| seen|...

CVE-2025-36528

creationtimestamp| type| source ---|---|--- 2025-06-09 12:01:36+00:00| seen| Telegram/bTJ9s6Dm5c98HBwnHhlVxkUI4b7kIVaieHQvre00jyC9A 2025-06-09 12:36:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114653436896870669...

CVE-2025-27709 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports...

WordPress Widget Logic <= 6.0.5 - Remote Code Execution (RCE) Vulnerability

Remote Code Execution RCE Vulnerability discovered by ch4r0n Patchstack Alliance in WordPress Plugin Widget Logic versions = 6.0.5...

CVE-2025-5871

The CVE-2025-5871 entry concerns Papendorf SOL Connect Center 3.3.0.0. The vulnerability affects the Web Interface component, with a missing/authentication-bypass flaw that allows remote access. Exploitation is described as remotely executable and the exploit has been disclosed publicly. Public d...

CVE-2025-5868

creationtimestamp| type| source ---|---|--- 2025-06-09 09:00:48+00:00| published-proof-of-concept| Telegram/DsgOWDcu9rxqKpsqPOtLg0t5RI81pwVIeAX7gB5uHK5m8 2025-06-09 09:39:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr63gymbv625...

CVE-2025-4652

creationtimestamp| type| source ---|---|--- 2025-06-09 07:23:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr5tvcjsf42e 2025-06-10 20:31:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17993 2026-02-11 17:16:15+00:00| confirmed|...

CVE-2025-47712

creationtimestamp| type| source ---|---|--- 2025-06-09 07:13:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr5tdfoczz2e 2026-01-08 05:03:39+00:00| seen| Telegram/36YuQ0XqAI4G5bdAUQmNkQIL1fMhKkwMpqpsGMiepBkvTc 2026-01-08 05:03:48+00:00| published-proof-of-concept|...

CVE-2025-47712

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...

CVE-2025-47711 Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error,...

CVE-2025-5814

The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsdplugincontrol function in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to reactivate...

CVE-2025-5859

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /test-details.php. The manipulation of the argument assignto leads to sql injection. The attack can be launch...

CVE-2025-5854

creationtimestamp| type| source ---|---|--- 2025-06-09 02:00:40+00:00| published-proof-of-concept| Telegram/AJN0S8YZYdVmzbOgnKAjxxpHw3CsdDBYQVeb8zgl5Lh2q4 2025-06-09 03:08:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr5fmvlrcl2u...

CVE-2025-5855 Tenda AC6 SetRebootTimer formSetRebootTimer stack-based overflow

A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16. This affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely...

CVE-2025-5849

creationtimestamp| type| source ---|---|--- 2025-06-09 01:18:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr57i2dpdn2s...

CVE-2025-5854 Tenda AC6 AdvSetLanip fromadvsetlanip buffer overflow

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2025-5854 Tenda AC6 AdvSetLanip fromadvsetlanip buffer overflow

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2025-49619

Skyvern through 0.1.85 is vulnerable to server-side template injection SSTI in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to...

CVE-2025-5852

CVE-2025-5852 affects Tenda AC6 15.03.05.16. The vulnerability is in the function formSetPPTPUserList in /goform/setPptpUserList, where manipulating the list argument leads to a buffer overflow. This can be exploited remotely (attack vector: network) and has public disclosure (exploit maturity: p...