CVE-2025-5996

creationtimestamp| type| source ---|---|--- 2025-06-12 10:33:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18160 2025-06-12 11:35:08+00:00| published-proof-of-concept| Telegram/fiao7xA0oH91C7wjAlMQ2SU0Cic3eA9k5t4dM3RPWX96YFU 2025-06-12 13:08:41+00:00| seen|...

WordPress OAuth Single Sign On (SSO) plugin <= 18.5.3 - Incorrect Authorization to Sensitive Information Exposure vulnerability

Incorrect Authorization to Sensitive Information Exposure vulnerability discovered by Israël Hallé Flare - Flare in WordPress Plugin OAuth Single Sign On - SSO OAuth Client versions = 18.5.3...

CVE-2025-5012

creationtimestamp| type| source ---|---|--- 2025-06-12 05:34:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18150 2025-06-12 06:02:14+00:00| seen| Telegram/Fr5oajOHm-RvpCSXOwQO2LCkeqnAkuTv8dOdLfwEqROeuk 2025-06-12 08:53:30+00:00| seen|...

CVE-2025-4973

creationtimestamp| type| source ---|---|--- 2025-06-12 05:34:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18149 2025-06-12 06:02:14+00:00| seen| Telegram/Fr5oajOHm-RvpCSXOwQO2LCkeqnAkuTv8dOdLfwEqROeuk 2025-06-12 08:48:30+00:00| seen|...

CGA-9X3P-XM8Q-HMVX

Bulletin has no description...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2025-1669)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : .NET / 8.0 (ELSA-2025-8813)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8813 advisory. 8.0.117-1.0.1 - Add support for Oracle Linux 8.0.117-1 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94420 Tenable has extracted the precedin...

PT-2025-25303 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. No details are provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue wa...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2025-1659)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for elfutils (EulerOS-SA-2025-1649)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-1699

creationtimestamp| type| source ---|---|--- 2025-06-11 16:33:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18086 2025-06-11 23:39:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrelctbjt22e...

CVE-2025-24770

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BZOTheme CraftXtore bw-craftxtore allows PHP Local File Inclusion.This issue affects CraftXtore: from n/a through = 1.7...

CVE-2025-5991

There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream uploads the body of a POST request and the simultaneous...

CVE-2025-49785

creationtimestamp| type| source ---|---|--- 2025-06-11 05:13:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcnj7jm2q23...

CVE-2025-4799

creationtimestamp| type| source ---|---|--- 2025-06-11 05:00:14+00:00| seen| Telegram/JEAUn8pNiGbueGM2r9qlU32xix55tUTsLJnwMIUqSZGeuQ 2025-06-11 05:40:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcozqwxoa2s...

CVE-2025-5825

creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-344/ 2025-06-25 18:51:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19508...

CVE-2025-47849

creationtimestamp| type| source ---|---|--- 2025-06-11 02:12:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcdfkdc372p 2025-06-14 04:33:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18353...

PT-2025-25193 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

TOTOLINK A3002RU IP Port Filtering Page Component Cross-Site Scripting Vulnerability

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK A3002RU, which stems from the lack of effective filtering and escaping of user-supplied data by the IP Port Filtering Page component parameter Comment,...

Huawei EulerOS: Security Advisory for abseil-cpp (EulerOS-SA-2025-1577)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...