GHSA-53VF-C43H-J2X9 Craft CMS vulnerable to potential information disclosure via unchecked asset relocation

Authenticated users on a Craft installation could potentially expose sensitive assets via their user profile photo via maliciously crafted requests. Users should update to the patched versions 5.8.21 and 4.16.17 to mitigate the issue. Resources:...

CVE-2025-14346

WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections. An attacker within range can pair with the device and issue movement commands, override speed restrictions, and manipulate configuration profiles without any credentials or user...

CVE-2025-14346

CVE-2025-14346 affects WHILL Model C2 Electric Wheelchairs and WHILL Model F Power Chairs. Connected sources confirm lack of authentication for Bluetooth connections, enabling an attacker within Bluetooth range to pair with the device and issue movement commands, override speed restrictions, and ...

CVE-2025-14346

WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections. An attacker within range can pair with the device and issue movement commands, override speed restrictions, and manipulate configuration profiles without any credentials or user...

CVE-2026-0597

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-0597

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-0591

creationtimestamp| type| source ---|---|--- 2026-01-05 15:04:04+00:00| published-proof-of-concept| Telegram/4A1OLCVEL3LZblNWQ64jtWUEZMdTTBgXCaAa5wleCJYgBw 2026-01-05 17:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbox22va4n2q...

CVE-2025-12511

creationtimestamp| type| source ---|---|--- 2026-01-05 15:03:42+00:00| published-proof-of-concept| Telegram/r7w3jNv4NOtgOUjuvoaTI3A2tPL2izMDUmcbBcA0oC5b5w 2026-01-05 16:41:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbouxn6jag2e 2026-01-08 14:15:08+00:00| seen|...

EUVD-2026-0852

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-0597 Campcodes Supplier Management System edit_profile.php sql injection

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-0597

CVE-2026-0597 affects Campcodes Supplier Management System v1.0. The vulnerability is in the file /retailer/edit_profile.php where manipulation of the txtRetailerAddress parameter causes an SQL injection. Remote exploitation is possible and the exploit has been published. Public sources assign hi...

CVE-2026-0597 Campcodes Supplier Management System edit_profile.php sql injection

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2023-52212

creationtimestamp| type| source ---|---|--- 2026-01-05 14:27:02+00:00| seen| https://gist.github.com/Darkcrai86/305263ca9f91b840d0e570d7134d864a 2026-01-05 16:32:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbouhlodb722...

CVE-2025-68280

creationtimestamp| type| source ---|---|--- 2026-01-05 14:18:24+00:00| seen| https://seclists.org/oss-sec/2026/q1/17 2026-01-05 15:30:46+00:00| seen| https://gist.github.com/Darkcrai86/1f974350056ca093e9738c65c3452ad1 2026-01-05 15:55:46+00:00| seen|...

CVE-2025-9543

creationtimestamp| type| source ---|---|--- 2026-01-05 08:52:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbo2r2r5ld2e...

CVE-2025-15238

creationtimestamp| type| source ---|---|--- 2026-01-05 06:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10616-cd942-2.html 2026-01-05 09:00:48+00:00| seen| Telegram/V8yQnIreQiFo9nm5GLLQXDL8cLU8arrcIPhkIygqETbLNE 2026-01-05 09:05:37+00:00| seen|...

CVE-2025-15459

creationtimestamp| type| source ---|---|--- 2026-01-05 06:28:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbnspzutnm2v 2026-01-05 06:29:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbnsqownet2z 2026-01-05 07:00:40+00:00|...

CVE-2025-15458

creationtimestamp| type| source ---|---|--- 2026-01-05 06:00:38+00:00| published-proof-of-concept| Telegram/PEDMC-xQRSNOdcRnaiEMJorZFRbVJMF3imIAdH1nAh3lQ 2026-01-05 09:10:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbo3re3osw2q...

CVE-2025-15454

creationtimestamp| type| source ---|---|--- 2026-01-05 04:50:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbnnali7ut2q...

CVE-2025-15447

creationtimestamp| type| source ---|---|--- 2026-01-05 00:34:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbn6vrl3ur2x 2026-01-05 01:00:18+00:00| published-proof-of-concept| Telegram/DGGSrjvaUmXT7Atu3SQCEOrjVg05EXAV9sj7fmeI4TEL3g...