CVE-2025-52555

creationtimestamp| type| source ---|---|--- 2025-06-26 20:51:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19652 2025-06-26 21:40:05+00:00| seen| https://seclists.org/oss-sec/2025/q2/282 2025-06-26 23:33:38+00:00| seen| https://seclists.org/oss-sec/2025/q2/283...

CVE-2014-0468

A security vulnerability exists in fusionforge (versions before 5.3+20140506 ) due to a flaw in the shipped Apache configuration . This configuration allows the web server to execute scripts that users have uploaded within raw SCM repositories, such as SVN , Git , or Bzr . The root cause is class...

CVE-2025-34043

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19634 2025-06-26 20:29:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjxqh25vc2m 2025-06-27 21:02:20+00:00| seen|...

CVE-2025-6561

creationtimestamp| type| source ---|---|--- 2025-06-26 12:53:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19593 2025-06-26 15:19:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjgfnqasf2i 2025-06-27 04:12:06+00:00| seen|...

WordPress Modern Design Library plugin <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via class Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Modern Design Library versions = 1.1.4...

WordPress Homerunner plugin <= 1.0.30 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Homerunner versions = 1.0.30...

CVE-2025-50693

PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Insecure Direct Object Reference IDOR in odms/request-details.php...

CVE-2025-6534

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel-admin/src/main/java/com/java2nb/common/controller/FileController.java of the component File Handler. The manipulation leads to improper...

WordPress Responsive Food and Drink Menu plugin <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via display_pdf_menus Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via displaypdfmenus Shortcode vulnerability discovered by Gilang in WordPress Plugin Responsive Food and Drink Menu versions = 2.3...

PT-2025-26954 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is described as not being a vulnerability, with a severity of 0.0 and marked as NA. No further details are provided about the nature of the issue or its potential impact...

YASM Heap Buffer Overflow DoS

The vulnerability of the yasmsectionbcsappend function in the YASM assembler is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Debian: Security Advisory (DLA-4230-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-10299

creationtimestamp| type| source ---|---|--- 2025-06-25 21:02:17+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3cckzt24 2026-06-19 12:53:14+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/87ce2c05-99c4-42f1-965e-b4799e83dc9d...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to CVE-2025-27144 in different components

Summary Go is used by IBM Storage Fusion Data Foundation in csi-dirver, odf-cli-container, ocs-operator-container, msc-operator-container, odf-multicluster-operator-container, rook-ceph-operator and ocs-metrics-exporter-container as part of CVE-2025-27144. This bulletin identifies the steps to ta...

Security Bulletin: IBM Storage Fusion is affected by exposure of information through cross-site scripting or data queries (CVE-2023-45288, CVE-2023-3978)

Summary IBM Storage Fusion Data Foundation uses HTTP to communicate. This bulletin identifies the steps to take to address the vulnerability in IBM Storage Fusion Data Foundation. CVE-2023-45288, CVE-2023-3978. Vulnerability Details CVEID:CVE-2023-45288 DESCRIPTION: An attacker may cause an HTTP/...

CVE-2025-6609

A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /panel/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be...

CVE-2025-48991

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19463 2025-06-25 16:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsh33cyagc2r...

Important: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.7 security and bug fix update

OpenShift API for Data Protection OADP 1.3.7 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2025-6434

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox 140 and Thunderbird 140...

CVE-2025-6433

If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This...