CVE-2025-4837

creationtimestamp| type| source ---|---|--- 2025-05-17 22:19:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfl6gvaxdj2 2025-05-18 01:13:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvq74kj2j...

CVE-2025-4921

creationtimestamp| type| source ---|---|--- 2025-05-17 22:19:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfl5uhsfmj2 2025-05-18 01:13:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvqfpes2e 2025-05-18...

CVE-2025-4829

creationtimestamp| type| source ---|---|--- 2025-05-17 17:12:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpf22qdnws2t...

CVE-2025-4824

creationtimestamp| type| source ---|---|--- 2025-05-17 10:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpeecly6ud2h...

CVE-2025-40906

creationtimestamp| type| source ---|---|--- 2025-05-17 06:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpdwv2qtyu2j...

WordPress WP Google Review Slider plugin < 15.6 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin WP Google Review Slider versions 15.6...

WordPress Lead Form Builder plugin < 1.9.8 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Contact Form & Lead Form Elementor Builder versions 1.9.8...

WordPress illi Link Party! plugin <= 1.0 - Admin+ Stored Cross-Site Scripting vulnerability

Admin+ Stored Cross-Site Scripting vulnerability discovered by Bob Matyas in WordPress Plugin illi Link Party! versions = 1.0...

WordPress WolfNet IDX for WordPress plugin <= 1.19.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Ma Long in WordPress Plugin WolfNet IDX versions = 1.19.1...

CVE-2025-4476

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 Unauthorized HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed...

GHSA-QX2M-RCPC-V43V

creationtimestamp| type| source ---|---|--- 2025-05-16 14:11:05+00:00| seen| https://poliverso.org/objects/0477a01e-0aa1c1a3-596b69f6d4d09712 2025-05-17 11:21:04+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3lpegg44dal2f 2025-05-17 12:00:05+00:00| seen|...

CVE-2025-4773

creationtimestamp| type| source ---|---|--- 2025-05-16 13:35:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16684 2025-05-16 17:02:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpciznz5g22n...

WordPress Sticky Radio Player plugin <= 3.4 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Sticky Radio Player versions = 3.4...

CVE-2025-37890 net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report 1, we have a UAF case when an hfsc class has a netem child qdisc. The crux of the issue is that hfsc is assuming that...

CVE-2025-2305

creationtimestamp| type| source ---|---|--- 2025-05-16 12:34:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16678 2025-05-16 13:02:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114517641793408821 2025-05-16 13:08:27+00:00| seen|...

CVE-2025-3769

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.92 via the 'viewbookingsummaryinlightbox' due to missing validation on a user controlled key. This makes it possible...

CVE-2025-1975

creationtimestamp| type| source ---|---|--- 2025-05-16 09:34:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16669 2025-05-16 12:30:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114517516963373383 2025-05-16 13:03:23+00:00| seen|...

CVE-2025-48175

A flaw was found in libavif. This vulnerability allows heap out-of-bounds writes via processing a specially crafted AVIF image...

CVE-2025-4742

creationtimestamp| type| source ---|---|--- 2025-05-16 03:34:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16611 2025-05-16 05:07:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpbb3u672h2t...

CVE-2025-4735

creationtimestamp| type| source ---|---|--- 2025-05-16 02:33:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16610 2025-05-16 05:07:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpbb3twuaz2h...