CVE-2025-54314

A flaw was found in Thor, where it improperly constructs shell commands using data derived from libraries. This flaw allows a local attacker to execute arbitrary commands. Command execution occurs when processing specially crafted library input. Mitigation Mitigation for this issue is either not...

CVE-2024-9343

creationtimestamp| type| source ---|---|--- 2025-07-21 07:07:46+00:00| seen| https://poliverso.org/objects/0477a01e-e25d1f2b-32702de2beb9d6c0...

Moderate: Red Hat Security Advisory: gnome-remote-desktop security update

An update for gnome-remote-desktop is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

WordPress EPay.bg Payments plugin <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin EPay.bg Payments versions = 0.1...

Moderate: Red Hat Security Advisory: gnome-remote-desktop security update

An update for gnome-remote-desktop is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2025-7909

creationtimestamp| type| source ---|---|--- 2025-07-21 00:36:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugqorirqw2j...

MB Connect Line mbNET.mini Cross-site Scripting Vulnerability

The mbNET.mini from MB CONNECT LINE is an industrial router designed for industrial scenarios and is primarily used to enable secure remote connections to machines and systems. A cross-site scripting vulnerability exists in MB CONNECT LINE mbNET.mini, which stems from improper neutralization of...

CVE-2025-43720

Headwind MDM versions prior to 5.33.1 are vulnerable to a missing authorization flaw (CWE-862) that allows unauthorized users to access sensitive configuration details. Specifically, the Configuration profile is exposed to users with the Observer role , which can reveal the password required to e...

Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2025-1845)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-7486: Improper Neutralization of Input During Web Page Generation

The Ebook Store plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Order Details in all versions up to, and including, 5.8012 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to...

CVE-2025-7905

creationtimestamp| type| source ---|---|--- 2025-07-20 23:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luglwoefdw2i...

CVE-2025-48965

creationtimestamp| type| source ---|---|--- 2025-07-20 20:25:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugcpeou3n2t...

Security Bulletin: Update JRE for Older Versions of IBM SPSS Statistics

Summary Vulnerabilities related to encryption were found in older versions of the Java Runtime Environment JRE. This Interim Fix addresses those problems. The IF applies to all applicable Java SE CVEs published by Oracle as part of their April 2025 Critical Patch Update plus CVE-2025-4447...

CVE-2025-7886

creationtimestamp| type| source ---|---|--- 2025-07-20 15:26:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufrwywpif2l...

CVE-2025-7882

creationtimestamp| type| source ---|---|--- 2025-07-20 14:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufqcjraqn27...

CVE-2025-7871

creationtimestamp| type| source ---|---|--- 2025-07-20 08:01:31+00:00| seen| https://bsky.app/profile/potato.software/post/3luez47hg2m26 2025-07-20 09:04:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luf4mmd6rp2t 2025-07-22 03:54:24+00:00| seen|...

CVE-2025-54314

creationtimestamp| type| source ---|---|--- 2025-07-20 06:51:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luev6iwmm42v...

CVE-2025-7836

creationtimestamp| type| source ---|---|--- 2025-07-20 00:40:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lueaicwr222i...

CVE-2021-44531

creationtimestamp| type| source ---|---|--- 2025-07-19 23:42:31+00:00| seen| https://gist.github.com/ryon341/0f355eed7cfb4d60bfbc0955055e5cf0...

CVE-2025-7856

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pass-details.php of the component HTTP POST Request Handler. The manipulation of the argument visname leads...