RHSA-2023:7417

creationtimestamp| type| source ---|---|--- 2025-08-01 16:45:01+00:00| seen| Telegram/xc3vkOd00NlphTo8oCaHSNQmEDCJCvPNfenHNFoNBmcoi4...

CVE-2025-7443

The BerqWP WordPress plugin (all versions up to and including 2.2.42 ) is vulnerable to unauthenticated arbitrary file upload due to missing file type validation in the store_javascript_cache.php file. An attacker can upload arbitrary files to the server, potentially achieving remote code executi...

CVE-2025-8476

creationtimestamp| type| source ---|---|--- 2025-08-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-765/...

PT-2025-32520 · Linksys · Linksys Re9000 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 versions up to 20250801 Description: A vulnerability exists in Linksys range extenders that allows for remote attacks. The issue is a stack-based buffer overflow in the remoteManagemen...

CVE-2025-52567

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 0.84 through 10.0.18, usage of RSS feeds or external calendars when planning is subject to SSRF exploit. The previous security patches provided...

BELL-CVE-2025-38435

Bulletin has no description...

CVE-2025-8258

A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.sdmagic.number. The manipulation leads to improper export of android...

CVE-2025-40600

creationtimestamp| type| source ---|---|--- 2025-07-30 00:57:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv5g2dmyrl2d 2025-07-30 16:05:18+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3lv6ysdswhk2f 2025-07-31 20:51:02+00:00| seen|...

CVE-2025-43213

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

WordPress Affiliate Plus Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress Affiliate Plus, which stems from missing or incorrect random number validation, and can be exploited by an...

code-projects Exam Form Submission 注入漏洞

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter USN in the file /register.php. An attacker can exploit this vulnerability to execute illegal SQL...

Taxi Stand Management System admin/new-autoortaxi-entry-form.php file cross-site scripting vulnerability

Taxi Stand Management System is a cab stand management system. Taxi Stand Management System suffers from a cross-site scripting vulnerability that originates from the incorrect operation of the parameter registrationnumber/licensenumber in the file /admin/new-autoortaxi-entry-form.php, for which ...

CVE-2025-43265

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose internal states of the app...

CVE-2025-43217

The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.9, iOS 18.6 and iPadOS 18.6. Privacy Indicators for microphone or camera access may not be correctly displayed...

CVE-2025-43184

CVE-2025-43184 affects macOS Shortcuts settings handling. The issue involves bypassing sensitive Shortcuts app settings, which was addressed by adding an additional user-consent prompt. Apple patches are available in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, and macOS Sequoia 15.4. The underlyin...

CVE-2025-43235

CVE-2025-43235 affects macOS Sequoia; the issue stems from memory handling and can allow an app to cause a denial-of-service. It is fixed in macOS Sequoia 15.6. No exploitation details are provided in the connected documents; remediation is to upgrade to Sequoia 15.6 or later.

CVE-2025-6637

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-54664

creationtimestamp| type| source ---|---|--- 2025-07-29 06:55:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3jn2vgtu2b...

CVE-2025-6637

creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-704/ 2025-07-29 19:19:14+00:00| seen| https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015 2025-07-29 20:45:45+00:00| seen|...

CVE-2025-54765

creationtimestamp| type| source ---|---|--- 2025-07-29 01:10:33+00:00| seen| https://bsky.app/profile/jimbecher.bsky.social/post/3lv2wdmsm4s2k 2025-07-29 02:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv33l4attd2o...