CVE-2025-44148

creationtimestamp| type| source ---|---|--- 2025-06-02 21:00:04+00:00| published-proof-of-concept| Telegram/06GZocrCG6eOyV53sFao3hKZD1hDVJHM749gzYRHtjl7dUE 2025-06-03 16:37:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqppvydhbup2...

CVE-2025-48387 tar-fs has issue where extract can write outside the specified dir with a specific tarball

tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workaround, use the ignore option to ignore n...

CVE-2025-49069 WordPress Contact Forms by Cimatti plugin <= 1.9.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in cimatti Contact Forms by Cimatti contact-forms allows Cross Site Request Forgery.This issue affects Contact Forms by Cimatti: from n/a through = 1.9.8...

CVE-2025-27953

creationtimestamp| type| source ---|---|--- 2025-06-02 18:34:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqng2oicygi2 2025-06-02 20:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqnmq7ea762j...

CVE-2025-20297

In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the pdfgen/render REST endpoint th...

CVE-2025-37096

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-5447

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter. The manipulation of the...

Moderate: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

CVE-2025-37091

A command injection remote code execution vulnerability exists in HPE StoreOnce Software...

CVE-2025-37090

CVE-2025-37090 describes a server-side request forgery in HPE StoreOnce Software . Public sources confirm the affected product and vulnerability class (SSRF) with a high CVSS3.1 base score (9.8) and network attack vector, no user interaction required. The available connected documents do not spec...

Key Takeaways from the Take Command Summit 2025: Risk Revolution – Proactive Strategies for Exposure Management

At the Take Command 2025 Virtual Cybersecurity Summit, a standout session titled Risk Revolution brought together Rapid7 product leaders and ESG analyst Tyler Shields to unpack the evolution of exposure management — and how organizations can build more context-driven, proactive risk strategies...

CVE-2025-48990

creationtimestamp| type| source ---|---|--- 2025-06-02 12:01:30+00:00| published-proof-of-concept| Telegram/rXYL1lXWkEU6X4s-B12vmJDiUkp3J5RpkWN8Rf8Wlc0XZWI 2025-06-02 13:29:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmuumvgmde2...

CVE-2025-5439

creationtimestamp| type| source ---|---|--- 2025-06-02 11:11:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmncyinzqa2...

CVE-2025-5438

CVE-2025-5438 affects Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 devices with firmware versions 1.0.013.001, 1.0.04.001/1.0.04.002, 1.1.05.003, and 1.2.07.001. The WPS function at /goform/WPS is vulnerable to command injection through manipulation of the PIN argument, and the attack can be...

CVE-2025-0325

creationtimestamp| type| source ---|---|--- 2025-06-02 08:59:28+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmfw6in5ka2...

CVE-2025-0358

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges...

CVE-2025-5428

creationtimestamp| type| source ---|---|--- 2025-06-02 06:31:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5pj77lbw2 2025-06-02 08:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqmexz5ziu2e...

CVE-2025-5431

creationtimestamp| type| source ---|---|--- 2025-06-02 06:31:24+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqm5okzp5qe2...

CVE-2025-3951

creationtimestamp| type| source ---|---|--- 2025-06-02 06:31:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5odaztub2 2025-06-02 08:28:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqmeanlu3l2m...

CVE-2025-5427

creationtimestamp| type| source ---|---|--- 2025-06-02 04:06:18+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqlvk3f6fvn2 2025-06-02 08:25:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqme2oaoda2j...