CVE-2025-20130 Cisco Identity Services Engine Access Control Bypass Vulnerability

A vulnerability in the API of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of the file copy...

CVE-2025-29093

creationtimestamp| type| source ---|---|--- 2025-06-04 16:03:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqs6le4ovpg2 2025-06-05 01:12:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqt5bvqgag2p...

CVE-2025-23095

creationtimestamp| type| source ---|---|--- 2025-06-04 16:03:16+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqs6kzr4as62...

CVE-2025-5592

creationtimestamp| type| source ---|---|--- 2025-06-04 14:20:28+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqryt43e74o2 2025-06-04 17:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqsbwtk3xm2e...

CVE-2025-48961

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Windows before build 39938...

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-48961

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Windows before build 39938...

CVE-2025-48960

CVE-2025-48960 concerns a weak server key used for TLS encryption affecting Acronis Cyber Protect 16 on Linux, macOS, and Windows before build 39938 . The vulnerability is caused by inadequate key material in the TLS setup, leading to low confidentiality (C) and partial integrity issues (I) per t...

CVE-2025-5598

creationtimestamp| type| source ---|---|--- 2025-06-04 12:38:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrt4jzzu32o 2025-06-04 12:40:06+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrt6fpioso2...

CVE-2025-48959

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 40077...

CVE-2025-5601

creationtimestamp| type| source ---|---|--- 2025-06-04 11:49:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrqejjhuig2 2025-06-04 12:06:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114625005980230275 2025-06-04...

CVE-2025-5598 WF Steuerungstechnik GmbH - airleader MASTER - Path Traversal

Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046...

CVE-2025-1246

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operation...

CVE-2025-48955

Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 exposes both access and secret keys in logs without redaction. These credentials are later reused in variable assignments for persistence but do not require...

CVE-2025-5583

creationtimestamp| type| source ---|---|--- 2025-06-04 10:30:21+00:00| published-proof-of-concept| Telegram/bLjrC9tPzCCzqBV9tPPk4RjX5hk6xn56Rb8xcYftwOmz04 2025-06-04 10:57:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrnitg2nwg2...

CVE-2025-5584

CVE-2025-5584 affects PHPGurukul Hospital Management System 4.0. The vulnerability is in the POST Parameter Handler for /doctor/edit-patient.php?editid=2, where manipulating the patname parameter triggers cross-site scripting. Remote exploitation is possible and exploits have been disclosed publi...

CVE-2025-5582

creationtimestamp| type| source ---|---|--- 2025-06-04 09:26:28+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqriepy5ywb2 2025-06-04 13:15:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrv6yoxag2a...

CVE-2025-47728

creationtimestamp| type| source ---|---|--- 2025-06-04 08:33:57+00:00| seen| Telegram/rzYr6oSh9PAauXcQEyfoiM17XavJOamHeAHzlIt-IhTrU 2025-06-04 09:26:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqriesyzhwv2 2025-06-04 10:54:29+00:00...

CVE-2025-5579

creationtimestamp| type| source ---|---|--- 2025-06-04 08:33:57+00:00| seen| Telegram/rzYr6oSh9PAauXcQEyfoiM17XavJOamHeAHzlIt-IhTrU 2025-06-04 09:26:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrifbjqqnv2...

CVE-2025-47724

creationtimestamp| type| source ---|---|--- 2025-06-04 08:33:57+00:00| seen| Telegram/rzYr6oSh9PAauXcQEyfoiM17XavJOamHeAHzlIt-IhTrU 2025-06-04 10:38:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrmfrrd252e 2025-06-24 10:00:00+00:00| seen|...