CGA-F59M-6VRR-QP9V

Bulletin has no description...

CVE-2025-53901

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.4, 33.0.2, and 34.0.2, a bug in Wasmtime's implementation of the WASIp1 set of import functions can lead to a WebAssembly guest inducing a panic in the host embedder. The specific bug is triggered by calling pathopen after calling...

CVE-2025-47995 Azure Machine Learning Elevation of Privilege Vulnerability

...

CVE-2025-54073

mcp-package-docs is an MCP Model Context Protocol server that provides LLMs with efficient access to package documentation across multiple programming languages and language server protocol LSP capabilities. A command injection vulnerability exists in the mcp-package-docs MCP Server prior to the...

CVE-2025-46732

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL NotificationLineNotificationMarkReadMutation and NotificationLineNotificationDeleteMutation mutations of OpenCTI allows an authenticated...

CVE-2025-6023

creationtimestamp| type| source ---|---|--- 2025-07-18 13:19:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114874434093981321 2025-07-18 21:03:26+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lubdujq4sw2c 2025-07-19 09:35:25+00:00| seen|...

CVE-2025-49485

creationtimestamp| type| source ---|---|--- 2025-07-18 12:14:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luagd54w3l2i...

CVE-2025-6233

Mattermost versions 10.8.x = 10.8.1, 10.7.x = 10.7.3, 10.5.x = 10.5.7, 9.11.x = 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal...

CVE-2025-5800

creationtimestamp| type| source ---|---|--- 2025-07-18 08:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua3eaibq72w...

CVE-2025-7648

creationtimestamp| type| source ---|---|--- 2025-07-18 08:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua2re3d7u2t...

CVE-2025-7444

CVE-2025-7444 affects LoginPress Pro for WordPress. Versions up to and including 5.0.1 suffer an authentication bypass due to insufficient verification of the user returned by the social login token, enabling unauthenticated attackers to log in as any existing user (e.g., administrator) if they h...

WordPress aapanel WP Toolkit plugin 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() Function vulnerability

WordPress aapanel WP Toolkit plugin 1.0 - 1.1 - Missing Authorization to Authenticated Subscriber+ Privilege Escalation via autologin Function vulnerability discovered by kr0d in WordPress Plugin aapanel WP Toolkit versions 1.0 - 1.1...

CVE-2025-7431

creationtimestamp| type| source ---|---|--- 2025-07-18 02:50:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu7gs72bqb2w 2025-08-24 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lx6f2ofybv2t 2026-09-02 16:00:04+00:00| seen|...

CVE-2025-7759

creationtimestamp| type| source ---|---|--- 2025-07-18 01:20:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu7brth27e2b...

CVE-2025-23269

creationtimestamp| type| source ---|---|--- 2025-07-18 00:56:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu7agcxgyh2j...

CVE-2025-52169

agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain a reflected cross-site scripting XSS vulnerability...

CVE-2025-50583

The student management system StudentManage v1.0 , developed by DayCloud Individual Developer, contains a cross-site scripting (XSS) vulnerability. The root cause is the mishandling of input within the Add A New Student module , which may allow an attacker to execute malicious scripts. Remediatio...

CVE-2025-34132

creationtimestamp| type| source ---|---|--- 2025-07-17 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdlgqwg2c...

CVE-2024-41921

A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'echo' verb, which allows a user to introspect a ROS topic and accepts a user-provided Python...

CVE-2025-53816

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...