CVE-2023-28902

An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause denial-of-service of the infotainment system. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part...

CVE-2023-28912

creationtimestamp| type| source ---|---|--- 2025-06-28 15:55:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19821 2025-06-28 18:39:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsosieieh32i...

CVE-2023-28910 Disabled Abortion Flag

A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled abortion flag eventually leading to bypassing assertion functions. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number...

WordPress plugin MicroPayments 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

CVE-2025-53321

creationtimestamp| type| source ---|---|--- 2025-06-27 18:39:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmbzvzxip23...

CVE-2025-52827

creationtimestamp| type| source ---|---|--- 2025-06-27 14:59:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lslvqfwjxq25...

CVE-2025-53277 WordPress IS-theme-companion plugin <= 1.59 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Infigo Software IS-theme-companion weblizar-companion allows Object Injection.This issue affects IS-theme-companion: from n/a through = 1.59...

CVE-2025-52827

Deserialization of Untrusted Data vulnerability in uxper Nuss nuss allows Object Injection.This issue affects Nuss: from n/a through = 1.3.3...

CVE-2024-51977

An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...

CVE-2024-51978

An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP...

CVE-2025-6749

creationtimestamp| type| source ---|---|--- 2025-06-27 05:03:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskuh77igh2s 2025-06-27 11:50:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19699...

CVE-2025-45737

creationtimestamp| type| source ---|---|--- 2025-06-27 04:51:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19666 2025-06-27 08:14:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsl74bxh752u...

Hostel Management System /contact_manager.php File SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter studentrollno in the file /contactmanager.php. An attacker can use this...

编号撤回

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. This CVE number has...

CVE-2025-51671

creationtimestamp| type| source ---|---|--- 2025-06-26 15:52:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19619 2025-06-26 21:09:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjzwgzx3j2u...

CVE-2025-29331

creationtimestamp| type| source ---|---|--- 2025-06-26 15:52:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19618 2025-06-26 18:42:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjrqbpivc2q...

CVE-2025-48922

creationtimestamp| type| source ---|---|--- 2025-06-26 13:51:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19601...

WordPress plugin Homerunner 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

Fedora 42 : trafficserver (2025-512daf16b9)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-512daf16b9 advisory. Changes with Apache Traffic Server 10.0.6 12298 - Add a setting to choose the data source of IP address for ACL 12299 - Add max inclusion depth...

CVE-2025-6661 PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability

PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...