CVE-2025-55734 flaskBlo Authorization Bypass

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, the code checks if the userRole is "admin" only when visiting the /admin page, but not when visiting its subroutes. Specifically, only the file routes/adminPanel.py checks the user role when a user is trying to access the admin page,...

CVE-2025-55734 flaskBlo Authorization Bypass

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, the code checks if the userRole is "admin" only when visiting the /admin page, but not when visiting its subroutes. Specifically, only the file routes/adminPanel.py checks the user role when a user is trying to access the admin page,...

CVE-2025-54336

creationtimestamp| type| source ---|---|--- 2025-08-19 13:47:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115055737900675209 2025-08-19 18:12:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwrjb6u5nc2g 2025-08-20 10:36:52+00:00| seen|...

CVE-2025-41685

creationtimestamp| type| source ---|---|--- 2025-08-19 08:11:01+00:00| seen| https://infosec.exchange/users/certvde/statuses/115054415790248821 2025-08-19 08:11:10+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lwqhmwyihxm2 2025-08-19 10:19:23+00:00| seen|...

CVE-2025-54939

creationtimestamp| type| source ---|---|--- 2025-08-19 06:30:17+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwqbyieldqw2 2025-08-19 07:17:07+00:00| seen|...

PT-2025-33845 · Flaskblog · Flaskblog

Name of the Vulnerable Software and Affected Versions: flaskBlog versions 2.8.0 and earlier Description: The application checks the userRole for "admin" privileges only when accessing the /admin page, but not its subroutes. Specifically, the check is performed in routes/adminPanel.py, but not in...

CVE-2025-55299

creationtimestamp| type| source ---|---|--- 2025-08-18 20:23:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwpa3jvqke2c 2025-08-19 04:31:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwq3ejegsd24...

CVE-2025-6186

creationtimestamp| type| source ---|---|--- 2025-08-18 18:34:32+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lwozypx4b22m 2025-08-18 18:34:34+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lwozypxc4k2m 2025-08-18 18:34:37+00:00| seen|...

CVE-2025-7739

creationtimestamp| type| source ---|---|--- 2025-08-18 18:34:32+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lwozypx4b22m 2025-08-18 18:34:35+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lwozypxc4k2m 2025-08-18 18:34:37+00:00| seen|...

CVE-2025-7734

creationtimestamp| type| source ---|---|--- 2025-08-18 18:34:32+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lwozypx4b22m 2025-08-18 18:34:35+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lwozypxc4k2m 2025-08-18 18:34:37+00:00| seen|...

CVE-2025-53192

creationtimestamp| type| source ---|---|--- 2025-08-18 18:16:20+00:00| seen| https://seclists.org/oss-sec/2025/q3/121 2025-08-19 00:08:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwpmni5hwr2u 2025-08-19 00:12:44+00:00| seen|...

CVE-2025-38495

creationtimestamp| type| source ---|---|--- 2025-08-18 12:57:24+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwoh5wd43k2k 2025-08-18 14:25:55+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwom472ww22k 2025-08-18 17:47:35+00:00| seen|...

CVE-2025-38494

creationtimestamp| type| source ---|---|--- 2025-08-18 12:57:24+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwoh5wd43k2k 2025-08-18 14:25:55+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwom472ww22k 2025-08-18 16:18:48+00:00| seen|...

CVE-2025-47206

creationtimestamp| type| source ---|---|--- 2025-08-18 09:01:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwnzxxuofj2p 2025-08-18 12:22:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwofa3h5no2e...

CVE-2025-6625

creationtimestamp| type| source ---|---|--- 2025-08-18 07:31:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwnuxeftuy2s 2025-08-18 09:02:05+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lwnzyzjo6s2y 2025-08-26 10:00:00+00:00| seen|...

CVE-2025-31713

creationtimestamp| type| source ---|---|--- 2025-08-18 03:01:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwnfua2jla2x 2025-08-18 04:03:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwnjcpz4s52e 2025-08-18 09:03:12+00:00| seen|...

CVE-2025-31715

creationtimestamp| type| source ---|---|--- 2025-08-18 01:31:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwnatmxetl2a 2025-08-18 04:08:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwnjloo6aq2g 2025-08-18 09:00:54+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2021-29450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This...

CVE-2025-8091

The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the addsingleeventon and addeventon shortcodes due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to...

CVE-2025-9089

creationtimestamp| type| source ---|---|--- 2025-08-17 00:01:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwkldig54h24 2025-08-17 04:07:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwkz3juvot23 2025-08-17 04:12:31+00:00| seen|...