1700 matches found
CVE-2025-9257
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...
CVE-2025-58042
creationtimestamp| type| source ---|---|--- 2025-08-23 05:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx27nx5poi2p...
CVE-2025-43770
creationtimestamp| type| source ---|---|--- 2025-08-23 05:10:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx27eyoenr2d...
CVE-2025-58043
creationtimestamp| type| source ---|---|--- 2025-08-23 04:37:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx25jsvx3s2p...
WordPress WP Talroo plugin <= 2.4 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Br0sck in WordPress Plugin WP Talroo versions = 2.4...
CVE-2025-48956
creationtimestamp| type| source ---|---|--- 2025-08-22 21:57:28+00:00| seen| https://bsky.app/profile/checkmarxzero.bsky.social/post/3lwzh7ejqip2s...
CVE-2025-50860
creationtimestamp| type| source ---|---|--- 2025-08-22 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwze4uefae2z...
CVE-2025-50859
creationtimestamp| type| source ---|---|--- 2025-08-22 21:00:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwzdz5dhi422 2025-08-23 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lx3ulqarfa2v...
CVE-2025-52450
creationtimestamp| type| source ---|---|--- 2025-08-22 20:32:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115074319985882829...
CVE-2025-29365
creationtimestamp| type| source ---|---|--- 2025-08-22 20:29:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwzcbkhj5x25...
CVE-2025-57800
creationtimestamp| type| source ---|---|--- 2025-08-22 20:14:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwzbgorvgu2q...
CVE-2025-38668
In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due to stale coupling data Failing to reset couplingdesc.ncoupled after freeing coupledrdevs can lead to NULL pointer dereference when regulators are accessed post-unbind. This can...
CVE-2025-38661
In the Linux kernel, the following vulnerability has been resolved: platform/x86: alienware-wmi-wmax: Fix dmisystemid array Add missing empty member to awccdmitable...
CVE-2025-55621
An Insecure Direct Object Reference IDOR vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other users' profile photos via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior; the photos are part of a social...
CVE-2025-55573
creationtimestamp| type| source ---|---|--- 2025-08-22 16:38:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwyvfuirc22a...
CVE-2025-9255
creationtimestamp| type| source ---|---|--- 2025-08-22 16:23:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwyukz5zdi2n...
CVE-2025-38618
In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDRPORTANY It is possible for a vsock to autobind to VMADDRPORTANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by accept also has port...
CVE-2025-8678
creationtimestamp| type| source ---|---|--- 2025-08-22 12:33:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwyhpeoga22l...
CVE-2025-49381
Cross-Site Request Forgery CSRF vulnerability in ads.txt Guru ads.txt Guru Connect adstxt-guru-connect allows Cross Site Request Forgery.This issue affects ads.txt Guru Connect: from n/a through = 1.1.1...