CVE-2025-40659 Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS

An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp...

CVE-2025-5740

creationtimestamp| type| source ---|---|--- 2025-06-10 08:32:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17839 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-04 2025-07-10 09:08:22+00:00| seen|...

CVE-2025-4954

creationtimestamp| type| source ---|---|--- 2025-06-10 06:30:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17833 2025-06-10 09:34:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lraln5j3eu2q...

CVE-2025-4840

The CVE concerns the WordPress plugin inprosysmedia-likes-dislikes-post (versions up to 1.0.0). The root cause is failure to properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action that unauthenticated users can access. This leads to an unauthenticated SQL i...

CVE-2025-42988

creationtimestamp| type| source ---|---|--- 2025-06-10 03:36:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7xo75kej2s...

CVE-2025-43574

creationtimestamp| type| source ---|---|--- 2025-06-10 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-338/ 2025-06-10 19:31:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17979 2025-06-12 22:25:49+00:00| seen|...

CVE-2025-47959

creationtimestamp| type| source ---|---|--- 2025-06-10 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-359/ 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-13 02:32:30+00:00| seen|...

CVE-2025-42982

creationtimestamp| type| source ---|---|--- 2025-06-10 01:33:53+00:00| seen| Telegram/VjI6o5iinQgIrx0kweQ6vZ4ijUEDsimPFeQ2gUe4Yzczac 2025-06-10 03:31:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7xfanaiq23 2025-06-10 04:44:33+00:00| seen|...

CVE-2025-42994

creationtimestamp| type| source ---|---|--- 2025-06-10 01:33:53+00:00| seen| Telegram/VjI6o5iinQgIrx0kweQ6vZ4ijUEDsimPFeQ2gUe4Yzczac 2025-06-10 03:17:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7wlicz7o2c...

CVE-2025-42991

SAP S/4HANA Bank Account Application does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the...

CVE-2025-42982

SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. This causes high impact on confidentiality, integrity and availability of the application...

CVE-2025-42988 Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no...

CVE-2025-42983 Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any...

CVE-2025-0036

The CVE concerns AMD Versal Adaptive SoC devices where the Secure Stream Switch (SSS) configuration is not cleared after a cryptographic operation in the Platform Loader and Manager (PLM) during post-boot runtime. This improper SSS setup can lead to data being written to or read from invalid memo...

CVE-2025-0037

The CVE-2025-0037 issue affects AMD Versal Adaptive SoC devices, arising from lack of address validation when PLM runtime services are executed via the PLM firmware. This could allow a remote processor to access isolated or protected memory spaces, compromising confidentiality and integrity (impa...

CVE-2025-5901

creationtimestamp| type| source ---|---|--- 2025-06-09 23:32:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17809 2025-06-10 01:23:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7qaabs7k2m...

CVE-2025-5903 TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the...

CVE-2025-5902

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument slaveIpList leads to buffer overflow. The attack may be initiate...

CVE-2025-26468

CyberData 011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition or system disruption...

CVE-2025-5900

creationtimestamp| type| source ---|---|--- 2025-06-09 22:32:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17804 2025-06-09 23:21:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7jeumhh32m...