CVE-2025-5696

creationtimestamp| type| source ---|---|--- 2025-06-06 01:12:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvnpyx24w2m...

CVE-2025-29094

Cross Site Scripting vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Marketing/Forms, Marketing/Offers and Content/Pages components...

CVE-2025-10234

creationtimestamp| type| source ---|---|--- 2025-06-06 00:55:27+00:00| seen| https://gist.github.com/zhenthebuilder/4a770766e6f7fb5bfae78e65f213ea75 2025-06-06 23:03:52+00:00| seen| https://gist.github.com/zhenthebuilder/97cf412d778693f512dd6d4fe812f0a3 2025-06-06 23:11:11+00:00| seen|...

CVE-2025-38002

In the Linux kernel, the following vulnerability has been resolved: iouring/fdinfo: grab ctx-uringlock around iouringshowfdinfo Not everything requires locking in there, which is why the 'haslock' variable exists. But enough does that it's a bit unwieldy to manage. Wrap the whole thing in a...

CVE-2025-5698 Brilliance Golden Link Secondary System logSelect.htm sql injection

A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /sysframework/logSelect.htm. The manipulation of the argument nodename leads to sql injection. It is possible to launch the attack...

CVE-2025-5677

creationtimestamp| type| source ---|---|--- 2025-06-05 20:30:44+00:00| published-proof-of-concept| Telegram/RAuR4LLNmn1CnkWaHAzYQYeG8hMJgMyoggU9ALosiP524 2025-06-06 01:17:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvnzi3vek2r...

WordPress Knowledge Base plugin <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Knowledge Base versions = 2.3.0...

CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

CVE-2025-5675 Campcodes Online Teacher Record Management System bwdates-reports-details.php sql injection

A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /trms/admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to...

CVE-2025-5667

creationtimestamp| type| source ---|---|--- 2025-06-05 17:00:36+00:00| published-proof-of-concept| Telegram/A9f37ZcuYx5jNdnKSVUqaR4RdNGeXXyhi5wZBDKeQiFw1DU 2025-06-05 18:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquyupk7fg2e 2025-06-13 19:34:59+00:00|...

CVE-2025-48493

The vulnerability CVE-2025-48493 affects the Yii 2 Redis extension (yii2-redis) used with Yii Framework 2.0. Prior to version 2.0.20, AUTH credentials are logged in plain text when a connection fails, exposing usernames and passwords to anyone with access to the logs. The issue is mitigated by up...

CVE-2025-5668 PHPGurukul Medical Card Generation System readenq.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/readenq.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-45655

IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment...

CVE-2025-1334

IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system...

CVE-2025-5663

creationtimestamp| type| source ---|---|--- 2025-06-05 14:39:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqukeulmevp2 2025-06-05 15:01:09+00:00| published-proof-of-concept| Telegram/Zv-pdrcTYlIiMzVhdVtgLNi1tORwiJJY7nTtoW4bJRg7PA...

CVE-2025-47827

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...

CVE-2025-5382

Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user management permission to remove or change administrators MFA...

CVE-2025-5658

creationtimestamp| type| source ---|---|--- 2025-06-05 13:07:19+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lquf5626ucp2 2025-06-05 15:01:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqullw7j262m...

CVE-2025-5660 PHPGurukul Complaint Management System register-complaint.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 2.0. Affected by this issue is some unknown functionality of the file /user/register-complaint.php. The manipulation of the argument noc leads to sql injection. The attack may be launched...

CVE-2011-10007

The File::Find::Rule module (through version 0.34 ) for Perl is vulnerable to Arbitrary Code Execution (CWE-78). The root cause is that the module opens a file handle using the 2-argument form of open(), which allows an attacker-controlled filename to provide the MODE parameter. This effectively ...