CVE-2025-29744

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

WordPress plugin Zen Sticky Social 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2024-38824

A directory traversal flaw was found in the Salt project. The "recvfile" method can be leveraged to allow arbitrary file writes to the master cache directory. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

CVE-2025-6030

creationtimestamp| type| source ---|---|--- 2025-06-13 16:08:29+00:00| seen| Telegram/Fw0XBy1WaCOjxg2mWHXnG8lWV81E0IbizYC1ykRJG5IGg 2025-06-13 17:40:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriy7iue562r 2025-06-16 04:57:45+00:00| seen|...

CVE-2025-36633

creationtimestamp| type| source ---|---|--- 2025-06-13 14:35:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18297 2025-06-13 16:08:29+00:00| seen| Telegram/Fw0XBy1WaCOjxg2mWHXnG8lWV81E0IbizYC1ykRJG5IGg 2025-06-13 17:09:21+00:00| seen|...

CVE-2025-45985

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bsSetSSIDHide function...

CVE-2025-49468

creationtimestamp| type| source ---|---|--- 2025-06-13 10:32:05+00:00| seen| Telegram/nG2kdAsSMNJFnQuBB8eLNRFNXLlpnIS3vQaD1YGco2LIks 2025-06-13 10:36:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18287 2025-06-13 11:15:20+00:00| seen|...

CVE-2025-6012

creationtimestamp| type| source ---|---|--- 2025-06-13 07:33:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18268 2025-06-13 11:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lricvgujon25...

CVE-2025-5491

creationtimestamp| type| source ---|---|--- 2025-06-13 02:33:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18243 2025-06-13 04:54:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhnfoyt6f2k 2025-06-13 16:41:00+00:00| seen|...

WordPress plugin Link Shield 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Restaurant Table Booking System /admin/add-table.php File Cross-Site Scripting Vulnerability

Restaurant Table Booking System is a restaurant table reservation system. The Restaurant Table Booking System suffers from a cross-site scripting vulnerability that stems from improper handling of the parameter tableno in the file /admin/add-table.php. An attacker could use this vulnerability to...

WordPress plugin WP2HTML 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site reques...

CVE-2025-45984

CVE-2025-45984 affects multiple Blink router models (BL-WR9000 2.4.9; BL-AC1900 1.0.2; BL-AC2100 AZ3 1.0.4; BL-X10 AC8 1.0.5; BL-LTE300 1.2.3; BL-F1200 AT1 1.0.0; BL-X26 AC8 1.2.8; BLAC450M AE4 4.0.0; BL-X26 DA3 1.2.7). A command injection vulnerability exists via the routepwd parameter in the su...

pg-promise SQL Injection vulnerability

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

CVE-2025-49080

creationtimestamp| type| source ---|---|--- 2025-06-12 17:35:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18203 2025-06-12 18:31:34+00:00| seen| Telegram/8shVKxKTpgJppwgqoSP5CMMCpmIT9d2sZKGL6M7b5sBVNGc 2025-06-13 16:10:37+00:00| seen|...

CVE-2025-47106

InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-47955

Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-24065

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...

CVE-2025-49184 Information disclosure to unauthorized user

A remote unauthorized attacker may gather sensitive information of the application, due to missing authorization of configuration settings of the product...

CVE-2025-2254

creationtimestamp| type| source ---|---|--- 2025-06-12 10:33:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18158 2025-06-12 11:35:08+00:00| published-proof-of-concept| Telegram/fiao7xA0oH91C7wjAlMQ2SU0Cic3eA9k5t4dM3RPWX96YFU 2025-06-12 11:43:16+00:00| seen|...