WordPress Mr. Murphy Theme < 1.2.12.1 is vulnerable to PHP Object Injection

Software Mr. Murphy Type Theme Vulnerable versions 1.2.12.1 Fixed in 1.2.12.1 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-49072 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 743adbe763dd Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

CVE-2024-48877

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2025-46561

creationtimestamp| type| source ---|---|--- 2025-06-01 17:01:30+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lqkqgl4r4k2r...

CVE-2025-5404

creationtimestamp| type| source ---|---|--- 2025-06-01 16:57:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqkq6vfu75x2 2025-06-01 20:22:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lql3oic4s22m...

CVE-2025-5403

creationtimestamp| type| source ---|---|--- 2025-06-01 16:57:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqkq6wn3q7z2 2025-06-01 20:27:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lql3xgsjm32a...

CVE-2025-1499

creationtimestamp| type| source ---|---|--- 2025-06-01 12:30:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqkbbod6qcz2 2025-06-01 16:45:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqkpk76ndh2e...

CVE-2025-2896

creationtimestamp| type| source ---|---|--- 2025-06-01 12:29:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqkbadd47vz2 2025-06-01 16:25:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqkogek2qp2k...

CVE-2025-5400

creationtimestamp| type| source ---|---|--- 2025-06-01 09:55:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqjykvxvrm42 2025-06-01 11:37:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqk6csdle72o...

CVE-2025-44906

jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...

CVE-2020-36846

A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library. Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a "one-shot" decompression request to a scrip...

CVE-2025-3052

creationtimestamp| type| source ---|---|--- 2025-05-12 19:49:32+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/17179 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 19:06:54+00:00| seen|...

CVE-2025-4373

creationtimestamp| type| source ---|---|--- 2025-05-06 15:21:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15133 2025-05-06 18:39:45+00:00| seen| https://t.me/cvedetector/24610 2025-06-11 21:20:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lredkb3ibk2d...

CVE-2025-3180

creationtimestamp| type| source ---|---|--- 2025-04-04 01:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llxactp7jk26 2025-04-04 02:07:03+00:00| seen| https://t.me/cvedetector/22043...

CVE-2024-37371

creationtimestamp| type| source ---|---|--- 2025-03-13 20:43:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7504 2025-06-12 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05...

CVE-2025-1829

creationtimestamp| type| source ---|---|--- 2025-03-02 19:28:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6106 2025-03-02 21:07:21+00:00| seen| https://t.me/cvedetector/19266 2025-06-06 15:15:20+00:00| seen|...

CVE-2025-23118

creationtimestamp| type| source ---|---|--- 2025-03-01 02:27:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6035 2025-03-01 06:24:44+00:00| seen| https://t.me/cvedetector/19205 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-376/ 2025-08-19 18:29:29+00:0...

CVE-2025-23119

creationtimestamp| type| source ---|---|--- 2025-03-01 02:27:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6031 2025-03-01 06:24:44+00:00| seen| https://t.me/cvedetector/19206 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-377/ 2025-08-19 18:29:29+00:0...

CVE-2025-21728

creationtimestamp| type| source ---|---|--- 2025-02-27 02:25:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5637 2025-02-27 04:30:15+00:00| seen| https://t.me/cvedetector/18980 2025-06-12 10:00:00+00:00| seen|...

GHSA-XQ3W-V528-46RV

creationtimestamp| type| source ---|---|--- 2025-02-14 15:15:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4455 2025-06-17 12:51:43+00:00| seen| https://gist.github.com/safer-bot/74e21949896b589baa948e9ed6f5748a 2025-07-16 05:05:11+00:00| seen|...

GHSA-93WW-43RR-79V3

creationtimestamp| type| source ---|---|--- 2025-01-30 18:12:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3504 2025-06-16 20:20:39+00:00| seen| https://gist.github.com/safer-bot/8eded6b925c160dc08c1b28d51d6c0c3 2025-06-17 01:00:32+00:00| seen|...