CVE-2025-52821

creationtimestamp| type| source ---|---|--- 2025-06-20 16:17:11+00:00| seen| Telegram/jX3P-npZhepmJEJEvfrnYKXIW1DnkYbd7t33-vEA6eRgmU 2025-06-20 17:28:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2krs2vwh2r 2025-06-23 16:47:18+00:00| published-proof-of-concept|...

CGA-RV23-M924-G58V

Bulletin has no description...

CVE-2025-49984 WordPress PowerPress Podcasting plugin <= 11.12.11 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Angelo Mandato PowerPress Podcasting allows Server Side Request Forgery. This issue affects PowerPress Podcasting: from n/a through 11.12.11...

CVE-2025-6323

creationtimestamp| type| source ---|---|--- 2025-06-20 09:41:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18921 2025-06-20 09:54:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrzrgd4ege2m 2025-06-20 10:01:43+00:00| published-proof-of-concept|...

CVE-2025-6300

creationtimestamp| type| source ---|---|--- 2025-06-20 02:43:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18895 2025-06-20 03:32:49+00:00| published-proof-of-concept| Telegram/L4lIqSsQXTjvnf6qzxT5xghkQ8yhZM589p63a7QTsdU-Cc 2025-06-20 04:10:39+00:00| seen|...

CVE-2022-50064

In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Avoid use-after-free on suspend/resume hctx-userdata is set to vq in virtblkinithctx. However, vq is freed on suspend and reallocated on resume. So, hctx-userdata is invalid after resume, and it will cause...

CVE-2025-6287

A vulnerability classified as problematic was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /test-details.php of the component Take Action. The manipulation of the argument remark leads to cross site scripting. Th...

SourceCodester Advance Charity Management System injection vulnerability

SourceCodester Advance Charity Management System is an open source charity management system from SourceCodester. An injection vulnerability exists in SourceCodester Advance Charity Management System version 1.0, which results from a SQL injection due to incorrect manipulation of parameter m06 in...

WordPress Plugin App Builder has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress App Builder plugin suffers from an improper access control vulnerability that stems from a lack of authorization, and no detailed vulnerability details are provide...

SUSE: Security Advisory (SUSE-SU-2025:01987-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-26371 · Unknown · Iamapinan Pdpa Consent For Thailand

Name of the Vulnerable Software and Affected Versions: iamapinan PDPA Consent for Thailand versions 1.1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

WordPress plugin eDS Responsive Menu has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An improper access control vulnerability exists in the WordPress eDS Responsive Menu plugin, which stems from a lack of authorization, and no detailed vulnerability details are...

PHPGurukul Emergency Ambulance Hiring Portal Injection Vulnerability

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter fromdate/todate in the file...

Code-Projects School Fees Payment System Code Injection Vulnerability

School Fees Payment System is a tuition payment system. School Fees Payment System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Branch/Address/Detail in the file /branch.php, which can be...

WordPress plugin ContentStudio has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An improper access control vulnerability exists in the WordPress ContentStudio plugin that stems from a lack of authorization, and no detailed vulnerability details are provided...

CVE-2025-6287 PHPGurukul COVID19 Testing Management System Take Action test-details.php cross site scripting

A vulnerability classified as problematic was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /test-details.php of the component Take Action. The manipulation of the argument remark leads to cross site scripting. Th...

Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution

Impact Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code, without being authenticated. With the ability to execute arbitrary code, this vulnerability can be exploited in an infinite number of ways. It could be used t...

WordPress Automatically Hierarchic Categories in Menu plugin <= 2.0.9 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Automatically Hierarchic Categories in Menu versions = 2.0.9...

CVE-2025-6334

creationtimestamp| type| source ---|---|--- 2025-06-19 10:29:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114709557607561674 2025-06-20 11:46:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18936 2025-06-20 12:01:57+00:00| published-proof-of-concept|...

CVE-2025-5234

creationtimestamp| type| source ---|---|--- 2025-06-19 09:43:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18843 2025-06-19 13:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrxo263ccw2p...