RHSA-2024:6842

creationtimestamp| type| source ---|---|--- 2025-07-24 13:36:18+00:00| seen| Telegram/NbE6uJrtwbDK9IW7nliDHdxLxWoJGtWow9EEsvdw7FPY0WQ 2025-08-30 22:20:46+00:00| seen| Telegram/jN3p0rCho2cvLYsHTHnhIMlK4AolhcCwlVRO9wRJlqHX1Xk...

CVE-2025-54371

creationtimestamp| type| source ---|---|--- 2025-07-24 00:43:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luocitvoux2t 2025-07-25 08:28:53+00:00| seen| https://infosec.exchange/users/adulau/statuses/114912928230679416 2025-07-25 14:08:06+00:00| seen|...

PHPGurukul Taxi Stand Management System 代码注入漏洞

Taxi Stand Management System is a cab stand management system. Taxi Stand Management System suffers from a cross-site scripting vulnerability that originates from the incorrect operation of the parameter registrationnumber/licensenumber in the file /admin/new-autoortaxi-entry-form.php, for which ...

WordPress plugin hiWeb Export Posts 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress hiWeb Export Posts, which stems from missing or incorrect random number validation, and can be exploited by a...

CVE-2025-27930

Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor...

CVE-2025-6174

creationtimestamp| type| source ---|---|--- 2025-07-23 09:07:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumo6qkbl223 2025-10-27 04:05:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-6174.yaml 2025-10-27...

CVE-2025-54440

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...

CVE-2025-43020

creationtimestamp| type| source ---|---|--- 2025-07-23 01:16:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lultvdlkox2j...

CVE-2025-51458

creationtimestamp| type| source ---|---|--- 2025-07-22 21:43:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulhy2pe4p2w...

CVE-2025-54072 yt-dlp allows `--exec` command injection when using placeholder on Windows

yt-dlp is a feature-rich command-line audio/video downloader. In versions 2025.06.25 and below, when the --exec option is used on Windows with the default placeholder or , insufficient sanitization is applied to the expanded filepath, allowing for remote code execution. This is a bypass of the...

CVE-2025-7393

creationtimestamp| type| source ---|---|--- 2025-07-22 19:01:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lul6walazg2w...

CVE-2022-44670

creationtimestamp| type| source ---|---|--- 2025-07-22 17:33:26+00:00| seen| Telegram/9RSbYEX6B2eD40Jb7EILaXFszyCaEHRbOR1mW1b29Xeiw4...

CVE-2025-35966

creationtimestamp| type| source ---|---|--- 2025-07-22 15:30:28+00:00| seen| https://infosec.place/objects/a987ac73-5467-4fe8-86cb-40d96e9bc9c4 2025-07-22 17:09:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukymz3tpy2h 2025-07-23 09:42:08+00:00| seen|...

CVE-2025-7687

creationtimestamp| type| source ---|---|--- 2025-07-22 14:41:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukqexd7c72t...

CVE-2025-41425

creationtimestamp| type| source ---|---|--- 2025-07-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-01 2025-07-23 00:46:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luls7nrweg2j...

SUSE SLES15 Security Update : kernel RT (Live Patch 10 for SLE 15 SP6) (SUSE-SU-2025:02439-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:02439-1 advisory. This update for the Linux Kernel 6.4.0-1506001034 fixes several issues. The following security issue was fixed: - CVE-2025-22115: btrfs: fix block gro...

Realistic Vulnerabilities of Decoy-State Quantum Key Distribution

We analyze realistic vulnerabilities of decoy-state quantum key distribution QKD arising from the combination of laser damage attack LDA and unambiguous state discrimination USD. While decoy-state QKD is designed to protect against photon-number-splitting and beam-splitting attacks by accurately...

CVE-2025-7840

creationtimestamp| type| source ---|---|--- 2025-07-19 20:50:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludtmpd5sc2h 2025-07-20 21:00:04+00:00| published-proof-of-concept| Telegram/uY5Tvdm-FXFHtBzqQsCzU1LlN848Rsne5reDW06MA9zjM 2025-07-20 23:00:10+00:00|...

CVE-2025-7396

creationtimestamp| type| source ---|---|--- 2025-07-19 02:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lubxbmw3ij2j 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:42+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2026-01-...

Use of Predictable Algorithm in Random Number Generator

Overview Affected versions of this package are vulnerable to Use of Predictable Algorithm in Random Number Generator via the RANDpoll function. An attacker can obtain predictable random values by invoking RANDbytes after a fork operation in affected applications. This is only exploitable if the...