CVE-2025-38034

In the Linux kernel, the following vulnerability has been resolved: btrfs: correct the order of prelimref arguments in btrfsprelimref btrfsprelimref calls the old and new reference variables in the incorrect order. This causes a NULL pointer dereference because oldref is passed as NULL to...

CVE-2025-49843

creationtimestamp| type| source ---|---|--- 2025-06-18 09:07:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrunuo6eqc2r...

CVE-2025-49824

creationtimestamp| type| source ---|---|--- 2025-06-18 09:03:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrunmymdxw2m...

WordPress tarteaucitron.io plugin < 1.9.5 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Pierre Rudloff in WordPress Plugin tarteaucitron.js – Cookies legislation & GDPR versions 1.9.5...

CVE-2025-49214

creationtimestamp| type| source ---|---|--- 2025-06-18 01:33:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrtuibnbc42s 2025-06-18 14:41:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18753...

SUSE CVE-2020-145936

unknown...

Slackware: Security Advisory (SSA:2025-168-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-49848 Out-of-bounds Write in LS Electric GMWin 4

An out-of-bounds write vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which can result in different memory corruption issues within the application, such as reading and writing past the end of allocated data...

CVE-2025-48274 WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpjobportal WP Job Portal wp-job-portal allows Blind SQL Injection.This issue affects WP Job Portal: from n/a through = 2.3.2...

CVE-2025-49266 WordPress Ultimate Reviews plugin <= 3.2.14 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rustaurius Ultimate Reviews allows Reflected XSS. This issue affects Ultimate Reviews: from n/a through 3.2.14...

CVE-2025-49880

Summary: CVE-2025-49880 affects WordPress CubeWP Forms (versions up to 1.1.5) with a missing authorization flaw enabling attackers to exploit misconfigured access controls. The vulnerability originates from inadequate access control checks in CubeWP Forms and is cataloged with a CVSS v3.1 base sc...

GHSA-FX2C-96VJ-985V

creationtimestamp| type| source ---|---|--- 2025-06-17 12:51:43+00:00| seen| https://gist.github.com/safer-bot/74e21949896b589baa948e9ed6f5748a 2025-07-16 22:54:47+00:00| seen| https://gist.github.com/safer-bot/854db19b37d85f8ecc0537be2939d6c9...

CVE-2025-5700

creationtimestamp| type| source ---|---|--- 2025-06-17 11:38:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18579 2025-06-17 15:41:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrstg5l2e72o...

CVE-2025-5291

creationtimestamp| type| source ---|---|--- 2025-06-17 11:38:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18577 2025-06-17 16:01:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrsujxd36h2a...

CVE-2025-49825

creationtimestamp| type| source ---|---|--- 2025-06-17 11:32:23+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lrsfiuodvs25 2025-06-17 22:00:58+00:00| published-proof-of-concept| Telegram/3wlas6nRaFbR1V-B1xEwrJrPKOz4CFQa-j0eVutc5pi--w 2025-06-17 22:03:08+00:00| seen|...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to authorization bypass due to golang/crypto ( CVE-2024-45337 )

Summary Potential vulnerabilities in golang/crypto module CVE-2024-45337 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-45337 DESCRIPTION: Applications and libraries which misuse connection.serverAuthenticate via callback field...

CVE-2025-48993

creationtimestamp| type| source ---|---|--- 2025-06-17 03:28:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrrki5y7up2o...

CVE-2025-6149

creationtimestamp| type| source ---|---|--- 2025-06-17 01:33:05+00:00| published-proof-of-concept| Telegram/d-twWttKC0mQrQUlNsP4vonXsAmc-g0KZPifeTLb24S9Y 2025-06-17 03:48:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrrlktxw3a2m...

📄 PCMan FTP Server 2.0.7 Buffer Overflow

PCMan FTP server version 2.0.l7 suffers from a buffer overflow vulnerability. Exploit Title: PCMan FTP Server 2.0.7 - Buffer Overflow Date: 04/17/2025 Exploit Author: Fernando Mengali Vendor Homepage: http://pcman.openfoundry.org/ Software Link:...

Moderate: containernetworking-plugins security update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...