CallApp Caller ID App 安全漏洞

CallApp Caller ID App is an intelligent caller identification and blocking application from the Israeli company CallApp A security vulnerability exists in CallApp Caller ID App version 2.0.4 and earlier, which stems from an improper export of the caller.id.phone.number.block component of the...

CVE-2025-7824

creationtimestamp| type| source ---|---|--- 2025-07-19 15:17:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludazfsi2q2j...

CVE-2025-38351

creationtimestamp| type| source ---|---|--- 2025-07-19 14:51:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lud7k6oyx32v...

CVE-2025-7697

creationtimestamp| type| source ---|---|--- 2025-07-19 08:36:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luckkzkyn72v...

CVE-2025-7655

creationtimestamp| type| source ---|---|--- 2025-07-19 06:20:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lucczgnfvf2j...

CVE-2025-7806

creationtimestamp| type| source ---|---|--- 2025-07-18 22:41:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lubje3hf2e2j 2025-09-09 20:56:45+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...

CVE-2025-7797

creationtimestamp| type| source ---|---|--- 2025-07-18 19:31:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lub6pbgzqf2i...

CGA-F59M-6VRR-QP9V

Bulletin has no description...

CVE-2025-53901

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.4, 33.0.2, and 34.0.2, a bug in Wasmtime's implementation of the WASIp1 set of import functions can lead to a WebAssembly guest inducing a panic in the host embedder. The specific bug is triggered by calling pathopen after calling...

CVE-2025-47995 Azure Machine Learning Elevation of Privilege Vulnerability

...

CVE-2025-54073

mcp-package-docs is an MCP Model Context Protocol server that provides LLMs with efficient access to package documentation across multiple programming languages and language server protocol LSP capabilities. A command injection vulnerability exists in the mcp-package-docs MCP Server prior to the...

CVE-2025-46732

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL NotificationLineNotificationMarkReadMutation and NotificationLineNotificationDeleteMutation mutations of OpenCTI allows an authenticated...

CVE-2025-6023

creationtimestamp| type| source ---|---|--- 2025-07-18 13:19:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114874434093981321 2025-07-18 21:03:26+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lubdujq4sw2c 2025-07-19 09:35:25+00:00| seen|...

CVE-2025-49485

creationtimestamp| type| source ---|---|--- 2025-07-18 12:14:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luagd54w3l2i...

CVE-2025-6233

Mattermost versions 10.8.x = 10.8.1, 10.7.x = 10.7.3, 10.5.x = 10.5.7, 9.11.x = 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal...

CVE-2025-5800

creationtimestamp| type| source ---|---|--- 2025-07-18 08:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua3eaibq72w...

CVE-2025-7648

creationtimestamp| type| source ---|---|--- 2025-07-18 08:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua2re3d7u2t...

CVE-2025-7444

CVE-2025-7444 affects LoginPress Pro for WordPress. Versions up to and including 5.0.1 suffer an authentication bypass due to insufficient verification of the user returned by the social login token, enabling unauthenticated attackers to log in as any existing user (e.g., administrator) if they h...

WordPress aapanel WP Toolkit plugin 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() Function vulnerability

WordPress aapanel WP Toolkit plugin 1.0 - 1.1 - Missing Authorization to Authenticated Subscriber+ Privilege Escalation via autologin Function vulnerability discovered by kr0d in WordPress Plugin aapanel WP Toolkit versions 1.0 - 1.1...

CVE-2025-7431

creationtimestamp| type| source ---|---|--- 2025-07-18 02:50:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu7gs72bqb2w 2025-08-24 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lx6f2ofybv2t...