CVE-2025-14587

creationtimestamp| type| source ---|---|--- 2025-12-13 11:43:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ujmbbakr2e...

CVE-2025-36754

creationtimestamp| type| source ---|---|--- 2025-12-13 11:39:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ujdmvbtx2q 2025-12-14 01:34:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/115715345801833765...

CVE-2025-14476

creationtimestamp| type| source ---|---|--- 2025-12-13 11:10:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7uhqitzvw2c...

CVE-2025-40277

creationtimestamp| type| source ---|---|--- 2025-12-13 10:34:09+00:00| seen| https://bsky.app/profile/secqube.com/post/3m7ufpjxk3k2u 2025-12-13 10:34:10+00:00| seen| https://bsky.app/profile/potato.software/post/3m7ufpktzzy2d 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-14581

creationtimestamp| type| source ---|---|--- 2025-12-13 07:27:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7u3blmegx2e...

CVE-2025-12512

creationtimestamp| type| source ---|---|--- 2025-12-13 07:14:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7u2kaqva722...

CVE-2025-14278

creationtimestamp| type| source ---|---|--- 2025-12-13 07:11:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7u2eboplq2g...

Improper Input Validation

mantisbt/mantisbt is vulnerable to improper input validation. The vulnerability is due to lack of email ownership verification during profile updates, which allows an attacker to register an unauthorized email address and potentially cause information disclosure by redirecting notifications...

CVE-2025-13320

The WP User Manager plugin for WordPress is vulnerable to Arbitrary File Deletion in all versions up to, and including, 2.9.12. This is due to insufficient validation of user-supplied file paths in the profile update functionality combined with improper handling of array inputs by PHP's filterinp...

CVE-2025-14584

creationtimestamp| type| source ---|---|--- 2025-12-13 03:25:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7tnrn6qax2u...

CVE-2025-64541

creationtimestamp| type| source ---|---|--- 2025-12-13 01:39:32+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3m7thtlfj7w2h...

CVE-2025-46289

creationtimestamp| type| source ---|---|--- 2025-12-12 23:52:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7tbthxxcl2o 2026-04-09 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mj3pezftrk2g...

CVE-2025-43542

creationtimestamp| type| source ---|---|--- 2025-12-12 23:34:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7tat5jyss2q 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83 2026-04-02 22:21:28+00:00| seen|...

CVE-2025-43519

creationtimestamp| type| source ---|---|--- 2025-12-12 23:27:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7tahsje5b2c...

CVE-2025-43539

creationtimestamp| type| source ---|---|--- 2025-12-12 23:24:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7tacw4yjr2o 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83 2026-04-02 22:21:28+00:00| seen|...

CVE-2025-64580

creationtimestamp| type| source ---|---|--- 2025-12-12 23:17:20+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3m7t7vc6v6m2i...

CVE-2025-64579

creationtimestamp| type| source ---|---|--- 2025-12-12 23:16:37+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3m7t7tzemld23...

CVE-2025-43520

creationtimestamp| type| source ---|---|--- 2025-12-12 23:15:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7t7su7ucw2e 2026-03-18 15:22:35+00:00| exploited| https://t.me/truesecator/8007 2026-03-19 01:31:22+00:00| seen|...

CVE-2025-43521

creationtimestamp| type| source ---|---|--- 2025-12-12 23:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7t7pi7hpl2c...

CVE-2024-58289

Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into user profile fields. Attackers can input script payloads in the first name field that will execute when the profile is viewed by other users, potentially...