CVE-2025-5346

creationtimestamp| type| source ---|---|--- 2025-07-17 15:02:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu677endax2g...

WordPress Knowledge Base plugin <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via Plugin Slug vulnerability discovered by Đỗ Quang Huy in WordPress Plugin Knowledge Base versions = 2.3.1...

CVE-2025-50089

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 9.0.0-9.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks ...

CVE-2025-4302

creationtimestamp| type| source ---|---|--- 2025-07-17 10:43:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu5qquihgh2w 2025-11-07 17:01:44+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-4302.yaml 2025-11-08...

Information Disclosure

org.elasticsearch.client, elasticsearch-rest-client is vulnerable to memory disclosure. The vulnerability is due to error messages leaking uninitialized buffer data when handling malformed queries, which allows an attacker to access sensitive information such as documents or authentication detail...

CVE-2025-50240

creationtimestamp| type| source ---|---|--- 2025-07-17 01:40:33+00:00| seen| https://gist.github.com/Cafe-Tea/88d385c1d297af939bb0089d04d9d158...

Amazon Linux 2023 : libnvidia, libnvidia-container, libnvidia-container1 (ALAS2023NVIDIA-2025-126)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-126 advisory. Placeholder CVE. Details forthcoming CVE-2025-23266 Placeholder CVE. Details forthcoming CVE-2025-23267 Tenable has extracted the preceding description block directly from the tested...

PT-2025-30119 · Undefined · Undefined

CVE-2024-12498 - CVE-2021-42251: Apache Struts Deserialization Remote Code Execution CVE ID : CVE-2024-12498 Published : July 16, 2025, 11:15 p.m. | 1 hour, 51 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA...

PT-2025-29938 · Solady · Solady

Name of the Vulnerable Software and Affected Versions: Solady versions 0.0.125 through 0.1.23 Description: Solady is software that provides Solidity snippets with APIs. When an account is deployed via a proxy, using regular Solidity to call its initialization function may result in a silent failu...

SUSE: Security Advisory (SUSE-SU-2025:02326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-49827

creationtimestamp| type| source ---|---|--- 2025-07-16 20:32:46+00:00| seen| https://seclists.org/oss-sec/2025/q3/49 2025-07-18 17:07:26+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3luawokctxi23 2025-08-07 13:45:02+00:00| published-proof-of-concept| https://t.me/truesecator/7...

MINI-8V39-HWQC-P55V

Bulletin has no description...

WordPress GymBase Theme Classes plugin <= 1.4 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin GymBase Theme Classes versions = 1.4...

WordPress Maya Business <= 1.2.0 - Insecure Direct Object References (IDOR) Vulnerability

Insecure Direct Object References IDOR Vulnerability discovered by ch4r0n in WordPress Plugin Maya Business versions = 1.2.0...

GHSA-2X2G-32R7-P4X8

creationtimestamp| type| source ---|---|--- 2025-07-16 10:52:33+00:00| seen| https://gist.github.com/safer-bot/45933a69f437440b7f18a4500149377e...

Information Disclosure

Indico is vulnerable to information disclosure. The vulnerability is due to an endpoint exposing user details such as name, affiliation, and email in bulk when listed in certain fields like ACLs, which allows an attacker to retrieve basic user information without proper authorization...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.4 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.4 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

GHSA-4P6W-M9WC-C9C9

creationtimestamp| type| source ---|---|--- 2025-07-16 04:40:46+00:00| seen| https://gist.github.com/safer-bot/2cb61debe66a6e25f7fc56c28c4ecf3c 2025-07-16 06:55:31+00:00| seen| https://gist.github.com/safer-bot/d9797f0aff4e030dd91427990bb06340 2025-07-16 10:18:29+00:00| seen|...

GHSA-2F88-5HG8-9X2X

creationtimestamp| type| source ---|---|--- 2025-07-16 03:28:42+00:00| seen| https://gist.github.com/safer-bot/685bc6d74a8ba9535ec0a502d8e83d05 2025-07-16 03:44:39+00:00| seen| https://gist.github.com/safer-bot/a2f85bb3abd40ab169cfae05635f3231 2025-07-16 05:45:14+00:00| seen|...

GHSA-65FG-84F6-3JQ3

creationtimestamp| type| source ---|---|--- 2025-07-16 03:14:06+00:00| seen| https://gist.github.com/safer-bot/f2a796b1c3ade94b037bb1ddfcabe9b1 2025-07-16 03:36:23+00:00| seen| https://gist.github.com/safer-bot/72f995b8cd1384d5441af0330c518fe4 2025-07-16 03:56:27+00:00| seen|...