CVE-2025-43002

creationtimestamp| type| source ---|---|--- 2025-05-13 03:12:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lozjabyxrw2l 2025-05-13 05:30:25+00:00| seen| https://t.me/cvedetector/25150...

CVE-2025-42999

SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system...

CVE-2025-47828

Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings...

CVE-2025-45861

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-1513)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-31247

creationtimestamp| type| source ---|---|--- 2025-05-12 22:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loz2g35uwr2e 2025-05-13 01:19:35+00:00| seen| https://t.me/cvedetector/25135 2026-04-02 22:17:36+00:00| seen| Telegram/D2Q8ZJtbt01PhfwyXC7lQ4EJlbjNcIuURdjGDUEt8LUtAQ...

CVE-2024-4982

A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they could discover secrets on the server...

CVE-2025-44176

creationtimestamp| type| source ---|---|--- 2025-05-12 18:23:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15934 2025-05-12 18:26:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15953 2025-05-12 18:26:52+00:00| published-proof-of-concept|...

CVE-2025-46750

creationtimestamp| type| source ---|---|--- 2025-05-12 17:32:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114496055573801981 2025-05-12 18:24:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15940 2025-05-12 18:26:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15959...

CVE-2025-46745

creationtimestamp| type| source ---|---|--- 2025-05-12 17:32:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114496055573801981 2025-05-12 18:24:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15945 2025-05-12 18:26:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15964...

CVE-2025-46748 Unverified Password Change

An authenticated user attempting to change their password could do so without using the current password...

CVE-2025-47578 WordPress BNS Twitter Follow Button plugin <= 0.3.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Edward Caissie BNS Twitter Follow Button bns-twitter-follow-button allows DOM-Based XSS.This issue affects BNS Twitter Follow Button: from n/a through = 0.3.8...

CVE-2025-46718 sudo-rs Allows Low Privilege Users to Enumerate Privileges of Others

sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges e.g. execution of a single command can list sudo privileges of other users using the -U flag. This vulnerability allows users with limited sudo privileges to enumerat...

CVE-2025-46717 sudo-rs Allows Low Privilege Users to Discover the Existence of Files in Inaccessible Folders

sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no or very limited sudo privileges can determine whether files exists in folders that they otherwise cannot access using sudo --list . Users with local access to a machine can discover the...

CVE-2025-46611

CVE-2025-46611 : ARTEC EMA Mail (v6.92) is affected by a Cross‑Site Scripting flaw that allows an attacker to execute arbitrary code via a crafted script, per the CVE description. The issue stems from an XSS vulnerability in EMA Mail 6.92 (root cause as stated in the sources). The provided metric...

CVE-2025-46610

ARTEC EMA Mail 6.92 allows CSRF...

CVE-2025-4535

A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information...

CVE-2025-4533

A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The...

CVE-2025-4467

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack...

CVE-2025-4532

CVE-2025-4532 affects Shanghai Bairui Information Technology SunloginClient 15.8.3.19819. The vulnerability is in an unspecified part of the library process.dll used by sunlogin_guard.exe, causing an uncontrolled search path. Exploitation requires local access and is described as high complexity ...