CVE-2025-5972

A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/manage-subadmins.php. The manipulation of the argument fullname leads to cross site scripting. It is possible to launch the attack remotel...

CVE-2025-0051

Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service...

CVE-2025-47977

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-47172

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-47968 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

...

CVE-2025-33068 Windows Standards-Based Storage Management Service Denial of Service Vulnerability

...

CVE-2025-33055 Windows Storage Management Provider Information Disclosure Vulnerability

...

CVE-2025-47962

CVE-2025-47962 is an elevation-of-privilege vulnerability in Windows SDK caused by improper access control, allowing an authorized local attacker to gain SYSTEM/privilege-level access. A PoC exploit exists in a GitHub repo (CVE-2025-47962-POC) showing local DLL loading and service manipulation (I...

CVE-2025-33067

CVE-2025-33067 — Windows Kernel local privilege escalation due to improper privilege management. Affects the Windows Kernel; attacker can gain elevated rights locally with no user interaction. CVSSv3.1 base score 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Connected sources confirm the impact as l...

CVE-2025-33065 Windows Storage Management Provider Information Disclosure Vulnerability

...

CVE-2025-33063 Windows Storage Management Provider Information Disclosure Vulnerability

...

CVE-2025-33063 Windows Storage Management Provider Information Disclosure Vulnerability

...

CVE-2025-33059 Windows Storage Management Provider Information Disclosure Vulnerability

...

CVE-2025-471678

creationtimestamp| type| source ---|---|--- 2025-06-10 16:45:25+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0189...

CVE-2025-25250

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability CWE-200 vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiSASE 25.1.c may allow an authenticated user to access full...

CVE-2025-43586

creationtimestamp| type| source ---|---|--- 2025-06-10 16:31:31+00:00| seen| Telegram/57-ZwpsnCne6luO5PRV3ORhWnDZIYPtLViEm2vB0oS0gThM 2025-06-10 17:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbfxdm6tb2p...

GHSA-JJ54-8F66-C5PC

creationtimestamp| type| source ---|---|--- 2025-06-10 15:31:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17910 2025-06-10 15:56:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114659883686202262...

CVE-2025-33064

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 19:32:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbn2oetze2c...

CVE-2025-5353

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials...

CVE-2024-34711

GeoServer CVE-2024-34711 is an XML processing vulnerability caused by improper URI validation during XML External Entities (XEE) handling. The affected component relates to the internal URI filtering (PreventLocalEntityResolver) and a regex that can still enable an attacker to reach HTTP servers ...