CVE-2024-45655

creationtimestamp| type| source ---|---|--- 2025-06-03 15:50:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpneoklasy2...

CVE-2025-36564

creationtimestamp| type| source ---|---|--- 2025-06-03 15:45:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpn2utfwwj2...

CVE-2025-25020

CVE-2025-25020 affects IBM QRadar Suite Software 1.10.12.0–1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0–1.10.11.0. Root cause: improper validation of API data input, allowing an authenticated user to cause a denial of service. IBM’s advisory and multiple sources confirm the vulnerability exis...

CVE-2025-5505

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011 and classified as problematic. This issue affects some unknown processing of the file /boafrm/formPortFw of the component Virtual Server Page. The manipulation of the argument servicetype leads to cross site scripting. The attack...

CVE-2025-5506 TOTOLINK A3002RU NAT Mapping Page cross site scripting

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been classified as problematic. Affected is an unknown function of the component NAT Mapping Page. The manipulation of the argument Comment leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2025-5498

creationtimestamp| type| source ---|---|--- 2025-06-03 14:58:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpkhj3uehp2...

CVE-2025-5501

creationtimestamp| type| source ---|---|--- 2025-06-03 14:58:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpkhdw7pkj2 2025-06-03 15:50:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpneyddb42m...

CVE-2025-46154

creationtimestamp| type| source ---|---|--- 2025-06-03 14:52:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpk5yt7fmy2 2025-06-03 16:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpohjrmsn2m...

CVE-2025-5502

creationtimestamp| type| source ---|---|--- 2025-06-03 14:52:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpk5dkxwwy2...

CVE-2025-46154

Foxcms v1.25 has a SQL time injection in the $POST'dbname' parameter of installdb.php...

CVE-2025-4435

creationtimestamp| type| source ---|---|--- 2025-06-03 14:03:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqphcvccuqj2 2025-06-03 15:59:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpnvmqodk2s 2025-06-09...

CVE-2025-5499 slackero phpwcms image_resized.php getimagesize deserialization

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function isfile/getimagesize of the file imageresized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit ha...

CVE-2024-12718

creationtimestamp| type| source ---|---|--- 2025-06-03 13:20:14+00:00| seen| https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f 2025-06-03 14:03:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqphcvqawfy2 2025-06-09...

CVE-2025-4138

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

CVE-2025-4205

The CVE-2025-4205 entry concerns the WordPress Popup Maker plugin. A stored cross-site scripting vulnerability exists via the popupID parameter in all versions up to and including 1.20.4, caused by insufficient input sanitization and output escaping. Consequences stated: authenticated attackers w...

CVE-2025-4671

CVE-2025-4671 affects the WordPress Profile Builder plugin for WordPress, versions up to and including 3.13.8. The root cause is insufficient input sanitization and output escaping on user_meta and compare shortcodes, enabling Stored Cross-Site Scripting (XSS). Exploitation requires authenticated...

CVE-2025-5492

creationtimestamp| type| source ---|---|--- 2025-06-03 11:15:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqp5yksz6xj2...

CVE-2025-1725

creationtimestamp| type| source ---|---|--- 2025-06-03 09:27:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxt2zripi2 2025-06-03 13:00:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpdwg54sw2q...

CVE-2025-4420

creationtimestamp| type| source ---|---|--- 2025-06-03 09:27:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxsxgnirt2...

CVE-2025-5103

creationtimestamp| type| source ---|---|--- 2025-06-03 09:27:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxsqf2jwi2 2025-06-03 12:45:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpd3koris2m...