SUSE: Security Advisory (SUSE-SU-2025:1339-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:01619-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5522

creationtimestamp| type| source ---|---|--- 2025-06-03 21:31:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqqahc5ldl2r...

WordPress Profile Builder plugin <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via usermeta and compare Shortcodes vulnerability discovered by muhammad yudha in WordPress Plugin Profile Builder versions = 3.13.8...

CVE-2025-5525

creationtimestamp| type| source ---|---|--- 2025-06-03 20:27:18+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqq4na7icl42 2025-06-03 20:28:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114621319697762645 2025-06-03...

CVE-2025-35036

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as ...

CVE-2025-5507

creationtimestamp| type| source ---|---|--- 2025-06-03 16:36:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqppuikfbjj2 2025-06-03 18:33:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpwim42tt2e...

CVE-2025-4330

A flaw was found in CPython's tarfile module. This vulnerability allows bypassing of extraction filters, enabling symlink traversal outside the intended extraction directory and potential modification of file metadata via malicious tar archives using TarFile.extractall or TarFile.extract with the...

BIT-DRUPAL-2024-55634 Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004

A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8...

CVE-2025-46355

creationtimestamp| type| source ---|---|--- 2025-06-03 09:28:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxt62uvvi2 2025-06-03 12:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpdnhphjz2k...

CVE-2025-4420

creationtimestamp| type| source ---|---|--- 2025-06-03 09:27:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxsxgnirt2...

CVE-2025-3584

creationtimestamp| type| source ---|---|--- 2025-06-03 08:56:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqowbr3g4e2r...

CVE-2025-2939

creationtimestamp| type| source ---|---|--- 2025-06-03 03:17:15+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqodbgz2pot2 2025-06-03 04:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqoijh7rkc2r...

TOTOLINK X2000R Injection Vulnerability

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R suffers from a command injection vulnerability that stems from the parameter peerRptPin failing to correctly filter constructed command special characters, commands, and so on. No details of the...

Problem with the memory dump on MPX

Platform details exec: show ns hardware Platform: NSMPX-8900 8CPU+32GB+4F1X+6E1K+1E1K+1COL 8955 30010 Manufactured on: 8/7/2021 CPU: 2100MHZ Host Id: xxxxxxxx Serial no: xxxxxxxx Encoded serial no: xxxxxxxxxx Netscaler UUID: xxxxxxxxxxxx BMC Revision: 4.61 Pasting ns.log.2 output for cleaner logs...

CVE-2025-44148

creationtimestamp| type| source ---|---|--- 2025-06-02 21:00:04+00:00| published-proof-of-concept| Telegram/06GZocrCG6eOyV53sFao3hKZD1hDVJHM749gzYRHtjl7dUE 2025-06-03 16:37:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqppvydhbup2...

CVE-2025-47585

creationtimestamp| type| source ---|---|--- 2025-06-02 20:37:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnmxts5orv2 2025-06-03 00:37:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqo2elu5gr2q...

WordPress Broken Link Checker plugin <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View vulnerability

Missing Autorization to Authenticated Subscriber+ Plugin Status Dashboard View vulnerability discovered by Nguyễn Trung Kiên in WordPress Plugin Broken Link Checker versions = 2.4.4...

CVE-2025-48940

creationtimestamp| type| source ---|---|--- 2025-06-02 17:01:55+00:00| published-proof-of-concept| Telegram/evyU1N0NEzlqWkLQZaMrYM3OKb94J6CqLDhasOVakxq7P0 2025-06-02 17:08:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnbbbz2jft2...

CVE-2024-57459

A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands...