CVE-2025-5303

creationtimestamp| type| source ---|---|--- 2025-06-07 09:00:31+00:00| seen| Telegram/lbBT3Ka5NzfRpwiXXrHSol6lP59mozpVG3czfgGZF2Dkc 2025-06-07 12:52:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqzfdjvu652m...

CVE-2025-49619

Skyvern through 0.1.85 is vulnerable to server-side template injection SSTI in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to...

CVE-2025-38000

A flaw was found in the HFSC queueing discipline implementation in the Linux kernel. When a packet is enqueued and the child qdisc's peek function is called before properly updating the HFSC queue's length and backlog counters, a race condition can occur. In some cases, the peek operation may...

CVE-2025-29876

File Station 5 is affected by a NULL pointer dereference (remote DoS) in versions prior to 5.5.6.4847. The issue can be triggered by a user account; upgrading to File Station 5 5.5.6.4847 and later resolves the vulnerability. The connected PT-2025-24300 entry confirms affected versions and the re...

CVE-2025-5765

creationtimestamp| type| source ---|---|--- 2025-06-06 15:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx5oyvnze2e...

CVE-2025-41646

An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device...

CVE-2025-5764

creationtimestamp| type| source ---|---|--- 2025-06-06 15:10:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx4l6vw5f2a...

CVE-2025-48961

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Windows before build 39938...

CVE-2025-5791

The CVE-2025-5791 entry concerns the Rust users crate with privilege escalation via incorrect group listing when a process has fewer than 1024 groups, which can incorrectly include the root group in the access list. Affected component: the user’s Rust crate (rust-users). Local/exploit path is ind...

CVE-2025-23969 WordPress KI Live Video Conferences plugin <= 5.5.15 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in whassan KI Live Video Conferences ki-live-video-conferences allows Retrieve Embedded Sensitive Data.This issue affects KI Live Video Conferences: from n/a through = 5.5.15...

CVE-2025-28984 WordPress Subscription Renewal Reminders for WooCommerce plugin <= 1.3.7 - Cross Site Request Forgery to Notice Dismissal vulnerability

Cross-Site Request Forgery CSRF vulnerability in storepro Subscription Renewal Reminders for WooCommerce allows Cross Site Request Forgery. This issue affects Subscription Renewal Reminders for WooCommerce: from n/a through 1.3.7...

CVE-2025-48783

creationtimestamp| type| source ---|---|--- 2025-06-06 11:02:40+00:00| seen| Telegram/IzUnLEyll0bCDFLZZ6Gvcvh0qc-X8AIjXpNZJHup4VBEb48 2025-06-06 11:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwptubx3v2r...

CVE-2025-48783

CVE-2025-48783 describes an external control of file name or path in the delete file function of Soar Cloud HRD Human Resource Management System, affected up to version 7.3.2025.0408. The vulnerability allows remote attackers to delete partial files by specifying arbitrary file paths. Exploitatio...

CVE-2025-5726

creationtimestamp| type| source ---|---|--- 2025-06-06 09:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwixpdxdu2o...

CVE-2025-5734

creationtimestamp| type| source ---|---|--- 2025-06-06 08:31:44+00:00| published-proof-of-concept| Telegram/2lxciVIudPRU1JELYymAPWJO5amPkWTwS2YjpxrD9s2lxPw 2025-06-06 10:18:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635904686208441...

CVE-2025-5735

creationtimestamp| type| source ---|---|--- 2025-06-06 08:31:44+00:00| published-proof-of-concept| Telegram/2lxciVIudPRU1JELYymAPWJO5amPkWTwS2YjpxrD9s2lxPw 2025-06-06 10:18:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635904686208441...

CVE-2025-3365 Relative Path Traversal in OnlineSuite

A missing protection against path traversal allows to access any file on the server...

CVE-2025-5734 TOTOLINK X15 HTTP POST Request formWlanRedirect buffer overflow

A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The atta...

CVE-2025-5563 WP-Addpub <= 1.2.8 - Authenticated (Contributor+) SQL Injection

The WP-Addpub plugin for WordPress is vulnerable to SQL Injection via the 'wp-addpub' shortcode in all versions up to, and including, 1.2.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-5715

creationtimestamp| type| source ---|---|--- 2025-06-06 05:08:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw2vuxfr22s 2025-06-06 10:10:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635874812023399...