CVE-2025-41646

An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device...

CVE-2025-5764

creationtimestamp| type| source ---|---|--- 2025-06-06 15:10:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx4l6vw5f2a...

CVE-2025-48961

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Windows before build 39938...

CVE-2025-5791

The CVE-2025-5791 entry concerns the Rust users crate with privilege escalation via incorrect group listing when a process has fewer than 1024 groups, which can incorrectly include the root group in the access list. Affected component: the user’s Rust crate (rust-users). Local/exploit path is ind...

CVE-2025-23969 WordPress KI Live Video Conferences plugin <= 5.5.15 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in whassan KI Live Video Conferences ki-live-video-conferences allows Retrieve Embedded Sensitive Data.This issue affects KI Live Video Conferences: from n/a through = 5.5.15...

CVE-2025-28984 WordPress Subscription Renewal Reminders for WooCommerce plugin <= 1.3.7 - Cross Site Request Forgery to Notice Dismissal vulnerability

Cross-Site Request Forgery CSRF vulnerability in storepro Subscription Renewal Reminders for WooCommerce allows Cross Site Request Forgery. This issue affects Subscription Renewal Reminders for WooCommerce: from n/a through 1.3.7...

CVE-2025-48783

creationtimestamp| type| source ---|---|--- 2025-06-06 11:02:40+00:00| seen| Telegram/IzUnLEyll0bCDFLZZ6Gvcvh0qc-X8AIjXpNZJHup4VBEb48 2025-06-06 11:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwptubx3v2r...

CVE-2025-48783

CVE-2025-48783 describes an external control of file name or path in the delete file function of Soar Cloud HRD Human Resource Management System, affected up to version 7.3.2025.0408. The vulnerability allows remote attackers to delete partial files by specifying arbitrary file paths. Exploitatio...

CVE-2025-5726

creationtimestamp| type| source ---|---|--- 2025-06-06 09:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwixpdxdu2o...

CVE-2025-5735

creationtimestamp| type| source ---|---|--- 2025-06-06 08:31:44+00:00| published-proof-of-concept| Telegram/2lxciVIudPRU1JELYymAPWJO5amPkWTwS2YjpxrD9s2lxPw 2025-06-06 10:18:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635904686208441...

CVE-2025-5734

creationtimestamp| type| source ---|---|--- 2025-06-06 08:31:44+00:00| published-proof-of-concept| Telegram/2lxciVIudPRU1JELYymAPWJO5amPkWTwS2YjpxrD9s2lxPw 2025-06-06 10:18:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635904686208441...

CVE-2025-3365 Relative Path Traversal in OnlineSuite

A missing protection against path traversal allows to access any file on the server...

CVE-2025-5734 TOTOLINK X15 HTTP POST Request formWlanRedirect buffer overflow

A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The atta...

CVE-2025-5563 WP-Addpub <= 1.2.8 - Authenticated (Contributor+) SQL Injection

The WP-Addpub plugin for WordPress is vulnerable to SQL Injection via the 'wp-addpub' shortcode in all versions up to, and including, 1.2.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-5715

creationtimestamp| type| source ---|---|--- 2025-06-06 05:08:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw2vuxfr22s 2025-06-06 10:10:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635874812023399...

CVE-2025-5674

creationtimestamp| type| source ---|---|--- 2025-06-06 01:42:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvpgahqr42s...

CVE-2025-5708

creationtimestamp| type| source ---|---|--- 2025-06-06 01:30:27+00:00| published-proof-of-concept| Telegram/Ky7-fAwyzxgpEw1yj-LKv6RLUuZgzm3K9CGTukUJcYN--I 2025-06-06 05:05:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw2qixmr62a...

CVE-2025-5698

creationtimestamp| type| source ---|---|--- 2025-06-06 01:07:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvnh2ifet2m...

CVE-2025-5697

creationtimestamp| type| source ---|---|--- 2025-06-06 00:52:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvmm6zl2v2s...

CVE-2025-5706

creationtimestamp| type| source ---|---|--- 2025-06-06 00:30:46+00:00| published-proof-of-concept| Telegram/Ye5u7iawGclqBMyVLRzmIkNrHeAFyk5kO9UgV2PswPRSwxs 2025-06-06 04:55:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw275ngpx2e...