CVE-2025-5994

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet ECS. Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to...

CVE-2025-34129

creationtimestamp| type| source ---|---|--- 2025-07-16 22:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lu4idwfthy26 2025-07-17 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdlbhy62c 2026-06-19 12:45:29+00:00| exploited|...

CVE-2025-48166

CVE-2025-48166 documents a Missing Authorization (Broken Access Control) in the WordPress plugin Stop and Block bots – Anti bots , affecting versions up to 1.48. The root cause is functionality not properly constrained by ACLs, enabling access to restricted features. Exploitation details are not ...

CVE-2025-53029

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2025-30749

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1;...

CVE-2025-53028

...

CVE-2025-53027

CVE-2025-53027 affects Oracle VM VirtualBox 7.1.10 (Core). Local attacker with logon can compromise Oracle VM VirtualBox; high impact to confidentiality, integrity and availability (CVSS v3.1 base 8.2). Root cause described as an issue in VirtualBox Core; exploitation details are not provided in ...

CVE-2025-53024

The CVE-2025-53024 entry concerns Oracle VM VirtualBox (Core) with affected version 7.1.10. The vulnerability allows a high-privilege attacker who can log on to the infrastructure running VirtualBox to take over the VirtualBox instance. The issue has a CVSS v3.1 base score of 8.2 (HIGH) with loca...

CVE-2025-50094

CVE-2025-50094 describes a vulnerability in Oracle MySQL Server (component: Server: DDL). Affected versions are 8.0.42, 8.4.5 and 9.3.0. The issue allows a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crashes (complete DOS). The provided sources s...

CVE-2025-50067

...

CVE-2025-50061

...

CVE-2025-50059

...

CVE-2025-50059

...

CVE-2025-30759

...

CVE-2025-30752

...

CVE-2025-30747

...

CVE-2025-30739

...

CVE-2025-53026

creationtimestamp| type| source ---|---|--- 2025-07-15 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-599/...

CVE-2025-53019

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's magick stream command, specifying multiple consecutive %d format specifiers in a filename template causes a memory leak. Versions 7.1.2-0 and...

CVE-2025-1735

In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. pgsql and pdopgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid...