CVE-2025-31715

creationtimestamp| type| source ---|---|--- 2025-08-18 01:31:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwnatmxetl2a 2025-08-18 04:08:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwnjloo6aq2g 2025-08-18 09:00:54+00:00| seen|...

CVE-2025-8896: Improper Neutralization of Input During Web Page Generation

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdprcommunicationpreferences' parameter in all versions up to, and including, 3.14.3 due to insufficient input sanitization and...

CVE-2025-49033: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid : from n/a through = 5.9.5.3...

CVE-2025-8876

creationtimestamp| type| source ---|---|--- 2025-08-13 20:00:13+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lwcmhgysnr2h 2025-08-13 22:36:57+00:00| seen| https://bsky.app/profile/ytroncal.bsky.social/post/3lwcv7lyc622v 2025-08-14 04:02:32+00:00| seen|...

CVE-2025-55149

creationtimestamp| type| source ---|---|--- 2025-08-08 21:43:28+00:00| published-proof-of-concept| https://github.com/ulab-uiuc/tiny-scientist/security/advisories/GHSA-rrgf-hcr9-jq6h 2025-08-09 02:53:58+00:00| seen|...

CVE-2025-8088

creationtimestamp| type| source ---|---|--- 2025-08-08 12:40:21+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lvvbkbr7ur23 2025-08-08 14:01:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvvg36hllc2s 2025-08-08 20:58:55+00:00| seen|...

CVE-2025-29866

creationtimestamp| type| source ---|---|--- 2025-08-07 09:00:56+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvsesylx2p27 2025-08-07 09:35:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvsgqfo6ve2c...

CVE-2022-50031

creationtimestamp| type| source ---|---|--- 2025-08-07 02:11:21+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lvrnwmnqqo2v 2025-08-07 02:13:24+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lvrnwriorv42...

CVE-2025-48530

creationtimestamp| type| source ---|---|--- 2025-08-05 10:46:42+00:00| seen| https://t.me/UzbeHackers/2537 2025-08-05 15:17:56+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lvnyswpjs3k2 2025-08-05 15:40:46+00:00| seen|...

Simulating Cyberattacks through a Breach Attack Simulation (BAS) Platform Empowered by Security Chaos Engineering (SCE)

In today digital landscape, organizations face constantly evolving cyber threats, making it essential to discover slippery attack vectors through novel techniques like Security Chaos Engineering SCE, which allows teams to test defenses and identify vulnerabilities effectively. This paper proposes...

PhishParrot: LLM-Driven Adaptive Crawling to Unveil Cloaked Phishing Sites

Phishing attacks continue to evolve, with cloaking techniques posing a significant challenge to detection efforts. Cloaking allows attackers to display phishing sites only to specific users while presenting legitimate pages to security crawlers, rendering traditional detection systems ineffective...

CVE-2025-51503

A Stored Cross-Site Scripting XSS vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript execution in admin browsers...

CVE-2025-51503

A Stored Cross-Site Scripting XSS vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript execution in admin browsers...

CVE-2025-50849

CS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference IDOR. The user profile functionality allows enabling or disabling stickers through a parameter companyid sent in the request. However, this operation is not properly validated on the server side. An authenticated user can manipulate...

CVE-2025-51503

A Stored Cross-Site Scripting XSS vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript execution in admin browsers...

RLSA-2025:4043 Moderate: bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts Rocky Enterprise Software Foundation, and pcmcia configuration files. Security Fixes: BlueZ: Audio Profile AVRCP Improper Validation of Array Inde...

CVE-2023-2533

creationtimestamp| type| source ---|---|--- 2025-07-28 15:00:30+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3luzuaqymgn2e 2025-07-28 16:07:00+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3luzxxo34xw2d 2025-07-29 02:51:00+00:00| seen|...

CVE-2025-26469

creationtimestamp| type| source ---|---|--- 2025-07-28 13:56:19+00:00| seen| https://bsky.app/profile/potato.software/post/3luzqnz3jio2m 2025-07-28 15:37:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3luzwc47lt52v...

CVE-2025-54296

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

Infinite loop

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...