CVE-2025-53380

creationtimestamp| type| source ---|---|--- 2025-06-28 04:39:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsndkghnuv2p...

Security Bulletin: IBM Storage Ceph is vulnerable to Cross-site Scripting in Jinja2 (CVE-2024-22195)

Summary Jinja2 is used by IBM Storage Ceph and by the RHEL UBI in multiple components. CVE-2024-22195 This bulletin identifies the steps to take to address the vulnerability in Jinja2. Affected components include nvme, grafana, keepalived, haproxy, promtail. snmp, ansible, fence-agents, rust...

Security Bulletin: IBM Storage Ceph is vulnerable to improper handling of JavaScript whitespace in golang in the RHEL UBI (CVE-2023-24540)

Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. CVE-2023-24540 This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. Vulnerability Details CVEID:CVE-2023-24540 DESCRIPTION: Not all valid JavaScript whitespace characters are considered ...

CVE-2025-5372

creationtimestamp| type| source ---|---|--- 2025-06-27 17:14:17+00:00| seen| https://seclists.org/oss-sec/2025/q2/284 2025-07-04 06:35:19+00:00| seen| https://bsky.app/profile/potato.software/post/3lt4mtdeqfs2x 2025-07-04 09:25:26+00:00| seen|...

WordPress Aioseo Multibyte Descriptions plugin <= 0.0.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin Aioseo Multibyte Descriptions versions = 0.0.6...

CVE-2025-46415

A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b...

Security Bulletin: IBM Maximo Application Suite - Manage Component uses express-4.19.2.tgz which is vulnerable to CVE-2024-43796

Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses express-4.19.2.tgz which is vulnerable to CVE-2024-43796. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-43796 DESCRIPTION: Express.js minimalist w...

Security Bulletin: IBM Maximo Application Suite - Manage Component uses helpers-7.26.7.tgz which is vulnerable to CVE-2025-27789

Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses helpers-7.26.7.tgz which is vulnerable to CVE-2025-27789. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for...

WordPress Firelight Lightbox plugin < 2.3.16 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Pierre Rudloff in WordPress Plugin Firelight Lightbox versions 2.3.16...

CVE-2025-6796

creationtimestamp| type| source ---|---|--- 2025-06-27 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-451/...

CVE-2022-26237

creationtimestamp| type| source ---|---|--- 2025-06-27 00:57:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskgo6t4nh2p...

CVE-2014-7210

creationtimestamp| type| source ---|---|--- 2025-06-27 00:37:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskfl2chie2s 2025-06-27 18:51:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19774...

COVID19 Testing Management System Take Action Component Cross-Site Scripting Vulnerability

COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter mark in the file...

SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2025:01981-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01981-1 advisory. - CVE-2025-49175: Out-of-bounds access in X Rendering extension Animated cursors bsc1244082. - CVE-2025-49176...

Red Hat Build of Keycloak Information Disclosure Vulnerability

Red Hat build of Keycloak is a web application for single sign-on from Red Hat, Inc. An information disclosure vulnerability exists in the Red Hat build of Keycloak, which originates from the /admin/serverinfo endpoint that contains internal server details, and can be exploited by an attacker to...

Emergency Ambulance Hiring Portal bwdates-request-report-details.php File SQL Injection Vulnerability

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter fromdate/todate in the file...

Client Details System index.php File SQL Injection Vulnerability

Client Details System is a client information system. Client Details System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in file /clientdetails/admin/index.php. An attacker can exploit this...

Oracle Linux 10 : git (ELSA-2025-7482)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7482 advisory. 2.47.1-2 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 Tenable has extracted the preceding description block directly from the...

CVE-2025-44163

creationtimestamp| type| source ---|---|--- 2025-06-26 23:12:16+00:00| seen| https://gist.github.com/YichaoXu/3694f039a3d1b973efd068e4dc662a41 2025-06-27 20:52:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19787...

WordPress isMobile plugin <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via device Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via device Parameter vulnerability discovered by Gilang in WordPress Plugin isMobile Shortcode for WordPress versions = 1.1.1...