CVE-2025-7833

creationtimestamp| type| source ---|---|--- 2025-07-19 18:31:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludltxn7sc2b...

CVE-2025-7817

creationtimestamp| type| source ---|---|--- 2025-07-19 15:12:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludaqhcegg2o 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:42+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

PHPGurukul Apartment Visitors Management System Code Injection Vulnerability

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameter visname in the file...

PHPGurukul Apartment Visitors Management System Code Injection Vulnerability

PHPGurukul Apartment Visitors Management System is an apartment visitor management system from PHPGurukul. A code injection vulnerability exists in version 1.0 of the PHPGurukul Apartment Visitors Management System due to cross-site scripting caused by improper handling of the parameter visname i...

melange's world-writable permissions expose SBOM files to potential image tampering

It was discovered that the SBOM files generated by melange in apks had file system permissions mode 666: $ apkrane ls https://packages.wolfi.dev/os/x8664/APKINDEX.tar.gz -P hello-wolfi --full --latest | xargs wget -q -O - | tar tzv 2/dev/null var/lib/db/sbom drwxr-xr-x root/root 0 2025-06-23 14:1...

CVE-2025-2425

creationtimestamp| type| source ---|---|--- 2025-07-18 12:39:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luahoqzmad2j...

CVE-2025-50057

creationtimestamp| type| source ---|---|--- 2025-07-18 12:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luagtrg2zi27...

CVE-2025-26854

creationtimestamp| type| source ---|---|--- 2025-07-18 09:28:16+00:00| seen| https://bsky.app/profile/jensen.technology/post/3lua4ziliac2e...

WordPress Vertical scroll image slideshow gallery plugin <= 11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via width Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Vertical scroll image slideshow gallery versions = 11.1...

CVE-2025-6391

creationtimestamp| type| source ---|---|--- 2025-07-18 00:45:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu77smevex2j...

Job Diary view-details.php file SQL Injection Vulnerability

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from an error in the parameter jobid in the file /view-details.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL...

PT-2025-30053 · Unknown · @Nuxtjs/Mdc

Name of the Vulnerable Software and Affected Versions: @nuxtjs/mdc versions prior to 0.17.2 Description: A remote script-inclusion / stored cross-site scripting issue exists in @nuxtjs/mdc. A Markdown author can inject a element, which rewrites how relative URLs are resolved. This allows an...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.20 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.20 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

CVE-2025-4657

creationtimestamp| type| source ---|---|--- 2025-07-17 20:55:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu6swtibf62j 2025-07-18 14:24:38+00:00| seen| https://bsky.app/profile/undercodenews.bsky.social/post/3luanlgptrq2k 2025-07-18 15:39:29+00:00| seen|...

MINI-FCRX-237F-H3VH

Bulletin has no description...

GHSA-29CQ-5W36-X7W3

creationtimestamp| type| source ---|---|--- 2025-07-17 18:42:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870042350039767...

CVE-2025-53644

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability...

CVE-2025-50102

creationtimestamp| type| source ---|---|--- 2025-07-17 15:27:52+00:00| seen| Telegram/mX7fPG0EACXOTvUMTw7UeMpEfeMsLrqMJ4O2g-8AFiLgrQ...

CVE-2025-50100

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Thread Pooling. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2025-50084

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...