CVE-2025-47959

creationtimestamp| type| source ---|---|--- 2025-06-10 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-359/ 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-13 02:32:30+00:00| seen|...

CVE-2025-43574

creationtimestamp| type| source ---|---|--- 2025-06-10 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-338/ 2025-06-10 19:31:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17979 2025-06-12 22:25:49+00:00| seen|...

CVE-2025-42994

creationtimestamp| type| source ---|---|--- 2025-06-10 01:33:53+00:00| seen| Telegram/VjI6o5iinQgIrx0kweQ6vZ4ijUEDsimPFeQ2gUe4Yzczac 2025-06-10 03:17:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7wlicz7o2c...

CVE-2025-42982

creationtimestamp| type| source ---|---|--- 2025-06-10 01:33:53+00:00| seen| Telegram/VjI6o5iinQgIrx0kweQ6vZ4ijUEDsimPFeQ2gUe4Yzczac 2025-06-10 03:31:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7xfanaiq23 2025-06-10 04:44:33+00:00| seen|...

CVE-2025-42991

SAP S/4HANA Bank Account Application does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the...

CVE-2025-42982

SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. This causes high impact on confidentiality, integrity and availability of the application...

CVE-2025-42988 Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no...

CVE-2025-42983 Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any...

CVE-2025-0036

The CVE concerns AMD Versal Adaptive SoC devices where the Secure Stream Switch (SSS) configuration is not cleared after a cryptographic operation in the Platform Loader and Manager (PLM) during post-boot runtime. This improper SSS setup can lead to data being written to or read from invalid memo...

CVE-2025-0037

The CVE-2025-0037 issue affects AMD Versal Adaptive SoC devices, arising from lack of address validation when PLM runtime services are executed via the PLM firmware. This could allow a remote processor to access isolated or protected memory spaces, compromising confidentiality and integrity (impa...

CVE-2025-5901

creationtimestamp| type| source ---|---|--- 2025-06-09 23:32:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17809 2025-06-10 01:23:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7qaabs7k2m...

CVE-2025-5903 TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the...

CVE-2025-5902

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument slaveIpList leads to buffer overflow. The attack may be initiate...

CVE-2025-26468

CyberData 011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition or system disruption...

CVE-2025-5900

creationtimestamp| type| source ---|---|--- 2025-06-09 22:32:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17804 2025-06-09 23:21:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7jeumhh32m...

CVE-2025-49139

creationtimestamp| type| source ---|---|--- 2025-06-09 21:31:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17783 2025-06-09 23:23:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7jjqz7562e...

CVE-2025-5918

creationtimestamp| type| source ---|---|--- 2025-06-09 20:31:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17764 2025-06-09 23:14:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7iyfsyb22m 2025-08-18 17:38:39+00:00| seen|...

CVE-2025-49136 listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Starting in version 4.0.0 and prior to version 5.0.2, the env and expandenv template functions which is enabled by default in Sprig enables capturing of env variables on host. While this may not be a problem on single-use...

CVE-2025-48122

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows SQL Injection.This issue affects...

CVE-2025-32595

CVE-2025-32595 is a WordPress Krowd (Krowd theme) vulnerability: an unauthenticated Local File Inclusion (LFI) due to improper filtering of local file resource calls in the PHP include/require flow, affecting Krowd up to version 1.4.1. The CVE is linked to Wordfence and CNVD entries that describe...