openSUSE Security Advisory (SUSE-SU-2025:01809-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-49012

creationtimestamp| type| source ---|---|--- 2025-06-05 23:19:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114633314018963839 2025-06-06 02:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvt3bqjlp2r...

CVE-2025-5676

creationtimestamp| type| source ---|---|--- 2025-06-05 19:30:46+00:00| published-proof-of-concept| Telegram/UOEJDoYx6ECu1tx4T0MRkt2PWOQIAE2ELKDIjsXPX4f8Pg 2025-06-06 01:37:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvp5bzbqh2a...

CVE-2025-49009

creationtimestamp| type| source ---|---|--- 2025-06-05 19:19:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquzyjhxki2s...

CVE-2025-5671 TOTOLINK N302R Plus HTTP POST Request formPortFw buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK N302R Plus up to 3.4.0-B20201028. Affected is an unknown function of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument servicetype leads to buffer overflow. It is possib...

CVE-2025-0691

creationtimestamp| type| source ---|---|--- 2025-06-05 14:39:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqukdxealci2...

CVE-2025-5657

creationtimestamp| type| source ---|---|--- 2025-06-05 13:07:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquf57rx6iv2...

CVE-2025-5341

creationtimestamp| type| source ---|---|--- 2025-06-05 11:44:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquaisjij542 2025-06-05 14:56:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqulcxpcqd2s...

CVE-2025-4568

Improper neutralization of input provided by an unauthorized user into changesreferenceid parameter in URL allows for boolean-based Blind SQL Injection attacks...

CVE-2025-4568

CVE-2025-4568 affects 2ClickPortal. The vulnerability is a SQL Injection flaw in the changes__reference_id parameter, caused by improper neutralization of input, enabling boolean-based blind SQL injection. Affected: 2ClickPortal versions prior to 7.14.3. Remediation: upgrade to 7.14.3 or later (a...

CVE-2025-5647

A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function rconscontextbreakpop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. The attack needs to be approached locally. The...

CVE-2025-5646

creationtimestamp| type| source ---|---|--- 2025-06-05 08:47:29+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqtwoot3hzv2 2025-06-05 11:22:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqu7ekpprg2s...

CVE-2024-53021

Information disclosure may occur while processing goodbye RTCP packet from network...

CVE-2025-48432

A flaw was found in Django. The request.path component of HTTP requests is not properly escaped when included in internal response logging, allowing remote attackers to manipulate log output through crafted URLs. This vulnerability allows an attacker to inject arbitrary content into Django's...

WordPress Elegant Visitor Counter plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Elegant Visitor Counter versions = 3.1...

CVE-2025-5622

CVE-2025-5622 affects the D-Link DIR-816 router (firmware 1.10CNB05). The vulnerability is a stack-based buffer overflow in the function wirelessApcli_5g within /goform/wirelessApcli_5g, triggered by improper length validation of arguments apcli_mode_5g/apcli_enc_5g/apcli_default_key_5g. It can b...

CVE-2025-48432

An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are...

Slackware: Security Advisory (SSA:2025-155-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5617 PHPGurukul Online Fire Reporting System manage-teams.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. This affects an unknown part of the file /admin/manage-teams.php. The manipulation of the argument teamid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-5612

creationtimestamp| type| source ---|---|--- 2025-06-04 21:18:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqsq5lp2nc42 2025-06-04 22:42:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqsuvhmfow2r...