CVE-2025-26198

creationtimestamp| type| source ---|---|--- 2025-06-10 06:56:40+00:00| seen| https://gist.github.com/tansique-17/0776791b8edd4931216be452a6971f5e 2025-06-18 19:32:57+00:00| seen| Telegram/hFe-u3icqprGxHlKdWuyo7rMpc25bDCLUZTf14NmEs7c4o 2025-06-18 19:43:47+00:00| seen|...

PT-2025-24626 · Schneider Electric · Modicon Controllers M241/M251

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An Uncontrolled Resource Consumption issue exists, potentially causing Denial of Service. This occurs when an authenticated malicious user sends a manipulated HTTPS Content-Length header to...

Tenda AC9 Command Injection Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a command injection vulnerability that stems from the parameter list in the file /goform/SetIPTVCfg failing to properly filter constructed command special characters, commands, and so on. No details of the...

TPM Reference Implementation

CVE Details assigned by the TCG Refer to Glossary for explanation of terms CVE| CVSS Score| CVE Description ---|---|--- CVE-2025-2884| 6.6 Medium CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H| An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a read past the end of a...

PT-2025-24854 · Microsoft · App Control For Business +1

Name of the Vulnerable Software and Affected Versions: App Control for Business WDAC affected versions not specified Description: The issue is related to the improper verification of cryptographic signatures, allowing an unauthorized attacker to bypass a security feature locally. This could...

Adobe Experience Manager Access Control Vulnerability

Adobe Experience Manager is a comprehensive content management solution from Adobe. Adobe Experience Manager suffers from an Improper Access Control vulnerability, no details of the vulnerability are provided at this time...

CVE-2025-29627

creationtimestamp| type| source ---|---|--- 2025-06-09 19:37:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr74ulf4un2m 2025-06-09 20:31:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17772...

WordPress Essential Addons for Elementor plugin <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget vulnerability

AuthenticatedContributor+ Stored Cross-Site Scripting via Pricing Table Widget vulnerability discovered by zer0gh0st in WordPress Plugin Essential Addons for Elementor versions = 6.1.12...

GHSA-H889-475R-WFMM Backend.AI Missing Authorization vulnerability

Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI. NOTE: The maintainers of BackendAI do not consider this report to fit...

CVE-2025-5889 juliangruber brace-expansion index.js expand redos

A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been rated as problematic. Affected by this issue is the function expand of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely...

Moderate: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2025-5867

creationtimestamp| type| source ---|---|--- 2025-06-09 08:01:10+00:00| seen| Telegram/8DD9EH1jjPgxFP-wN6j7n4FLGqxinvMMBZqqPnx2jljiLjs 2025-06-09 09:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr63px2kwr2c...

CVE-2025-5859

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /test-details.php. The manipulation of the argument assignto leads to sql injection. The attack can be launch...

firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A clickjacking vulnerability could be used to trick a user into leaking saved payment card details to a malicious page...

Moderate: Red Hat Security Advisory: skopeo security update

An update for skopeo is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Fedora: Security Advisory (FEDORA-2025-c04e5b95f1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-24567 · Vue.Js · Vue-Cli

Name of the Vulnerable Software and Affected Versions: vuejs vue-cli versions up to 5.0.8 Description: A vulnerability was found in the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficien...

WordPress plugin PayU India has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress PayU India plugin that stems from vulnerability to authentication bypass attacks, no details of the vulnerability are provided a...

Debian: Security Advisory (DSA-5939-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-34089

creationtimestamp| type| source ---|---|--- 2025-06-08 14:11:56+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/http/remoteformacrce.rb 2025-07-03 23:00:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3tgbx3ul2s 2025-07-04...