CVE-2017-15735

creationtimestamp| type| source ---|---|--- 2025-12-04 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m76umseowi2j...

CVE-2025-65320

creationtimestamp| type| source ---|---|--- 2025-12-04 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m76ums5ouy2w...

CVE-2025-66571 UNA CMS 9.0.0-RC1 - 14.0.0-RC4 PHP Object Injection

UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where the profileid POST parameter is passed to PHP unserialize without proper handling, allowing remote, unauthenticated attackers to inject arbitrary PHP objects and potentially wri...

CVE-2025-66571

UNA CMS versions 9.0.0-RC1 through 14.0.0-RC4 are affected by a PHP object injection in BxBaseMenuSetAclLevel.php. The profile_id POST parameter is passed to PHP unserialize() without proper handling, enabling remote, unauthenticated attackers to inject arbitrary PHP objects and potentially write...

CVE-2025-66571 UNA CMS 9.0.0-RC1 - 14.0.0-RC4 PHP Object Injection

UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where the profileid POST parameter is passed to PHP unserialize without proper handling, allowing remote, unauthenticated attackers to inject arbitrary PHP objects and potentially wri...

CVE-2025-66571 UNA CMS 9.0.0-RC1 - 14.0.0-RC4 PHP Object Injection

UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where the profileid POST parameter is passed to PHP unserialize without proper handling, allowing remote, unauthenticated attackers to inject arbitrary PHP objects and potentially wri...

CVE-2025-14011

creationtimestamp| type| source ---|---|--- 2025-12-04 18:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m76nohflmx2q...

CVE-2025-63364

creationtimestamp| type| source ---|---|--- 2025-12-04 18:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m76mupceml2k...

CVE-2025-20381

creationtimestamp| type| source ---|---|--- 2025-12-04 14:50:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m767t3uk6e2b...

CVE-2025-20382

creationtimestamp| type| source ---|---|--- 2025-12-04 14:50:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m767t3uk6e2b...

CVE-2025-65082

creationtimestamp| type| source ---|---|--- 2025-12-04 14:41:08+00:00| seen| https://seclists.org/oss-sec/2025/q4/243 2025-12-04 16:07:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m76e52bnh62i 2025-12-04 17:40:45+00:00| seen|...

CVE-2025-58098

creationtimestamp| type| source ---|---|--- 2025-12-04 14:18:26+00:00| seen| https://seclists.org/oss-sec/2025/q4/241 2025-12-04 16:01:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m76dsazp6v2s 2025-12-04 17:40:45+00:00| seen|...

CVE-2025-66516

creationtimestamp| type| source ---|---|--- 2025-12-04 13:20:01+00:00| seen| https://seclists.org/oss-sec/2025/q4/238 2025-12-04 14:45:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m767jyxk6l2s 2025-12-04 17:09:01+00:00| seen|...

CVE-2025-43392

creationtimestamp| type| source ---|---|--- 2025-12-04 02:37:54+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m74wvo4uqb2u...

PT-2025-49139

Name of the Vulnerable Software and Affected Versions UNA CMS versions 9.0.0-RC1 through 14.0.0-RC4 Description The software contains a PHP object injection issue in the BxBaseMenuSetAclLevel.php component. The profile id POST parameter is passed to the PHP unserialize function without sufficient...

UNA 代码问题漏洞

UNA is a suite of full-stack software platforms for building custom community websites, social networks, and collaboration centers from UNA. A code issue vulnerability exists in UNA versions 9.0.0-RC1 through 14.0.0-RC4, which stems from improper handling of the deserialization of the profileid...

CVE-2025-66373

creationtimestamp| type| source ---|---|--- 2025-12-03 23:07:17+00:00| seen| https://bsky.app/profile/geeknik.bsky.social/post/3m74l525ixj2w 2025-12-04 19:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m76nxfvi372j 2025-12-14 13:18:27+00:00| seen|...

CVE-2025-66222

creationtimestamp| type| source ---|---|--- 2025-12-03 22:01:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m74hgxc23h2n 2025-12-04 00:10:03+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m74oncedo32c 2025-12-04 03:03:05+00:00| seen|...

CVE-2025-20387

creationtimestamp| type| source ---|---|--- 2025-12-03 21:56:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m74h5ytt6h2q 2025-12-04 09:10:07+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m75msyn25622 2025-12-04 14:50:12+00:00| seen|...

CVE-2025-20386

creationtimestamp| type| source ---|---|--- 2025-12-03 21:46:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m74gm3yjl52u 2025-12-04 12:10:07+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m75wutrg2l2c 2025-12-04 14:50:12+00:00| seen|...