CGA-XPVR-G266-8G9G

Bulletin has no description...

CGA-XJVP-6V8Q-GHCH

Bulletin has no description...

CGA-6JJH-GP68-PHGC

Bulletin has no description...

CGA-P935-78H5-WQ59

Bulletin has no description...

CGA-5XQ6-2W6X-VM43

Bulletin has no description...

CVE-2025-6070

CVE-2025-6070 (Restrict File Access plugin for WordPress) is a directory traversal vulnerability (via output()) exploitable by authenticated users with Subscriber+ privileges to read arbitrary server files on all versions up to 1.1.2. The connected documents confirm the attack vector is local fil...

CVE-2025-50145

creationtimestamp| type| source ---|---|--- 2025-06-14 07:36:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkgvqkp4t2k...

CVE-2025-50147

creationtimestamp| type| source ---|---|--- 2025-06-14 07:08:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkfeq4rbb2a...

CVE-2025-48964

creationtimestamp| type| source ---|---|--- 2025-06-13 18:04:24+00:00| seen| https://gist.github.com/EbonJaeger/94d6b11fee980a997a2d1e6007418f90 2025-07-21 22:00:41+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luiyhkfkkc2y 2025-07-21 22:21:22+00:00| seen|...

CVE-2025-49581

creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18306 2025-06-13 17:05:18+00:00| published-proof-of-concept| Telegram/LbSE4ui0deWaIbAIySI6HyoY8sH4t9aZhKhv-gkpgMW3iE 2025-06-13 17:27:29+00:00| seen|...

CVE-2025-36633

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation...

CVE-2025-45987

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bsSetDNSInfo...

CVE-2025-45986

creationtimestamp| type| source ---|---|--- 2025-06-13 11:33:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18290 2025-06-13 15:13:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lripzfawgp2a 2025-06-13 16:08:21+00:00| published-proof-of-concept|...

CVE-2025-29902

Remote code execution that allows unauthorized users to execute arbitrary code on the server machine...

CVE-2025-46783

creationtimestamp| type| source ---|---|--- 2025-06-13 08:34:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18283 2025-06-13 09:31:46+00:00| seen| Telegram/o1ZTzABdZN3OAzUP6RsYm0T2XzE-gKGKO27WNgsxHNfYZg 2025-06-13 12:13:44+00:00| seen|...

CVE-2025-22241

File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location a...

CVE-2025-5930

creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18250 2025-06-13 05:15:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrholwrb6m2e...

CVE-2025-4275

A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...

CVE-2025-49589 PCSX2 Contains a Stack-based Buffer Overflow in IOP Console Logging

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. A stack-based buffer overflow exists in the KprintfHLE function of PCSX2 versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled IOP...

CVE-2025-5485

User names used to access the web management interface are limited to the device identifier, which is a numerical identifier no more than 10 digits. A malicious actor can enumerate potential targets by incrementing or decrementing from known identifiers or through enumerating random digit sequenc...