CVE-2025-54563

creationtimestamp| type| source ---|---|--- 2025-11-25 01:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6g7ib253v2k...

CVE-2025-62155

creationtimestamp| type| source ---|---|--- 2025-11-25 01:32:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6g6zuiwi62x 2025-11-25 15:42:03+00:00| seen| https://bsky.app/profile/checkmarxzero.bsky.social/post/3m6hojjhtq52q...

CVE-2025-63498

creationtimestamp| type| source ---|---|--- 2025-11-25 01:18:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6g6az6ajn2s...

CVE-2025-64064

Primakon Pi Portal 1.0.18 /api/v2/ppusers endpoint fails to adequately check user permissions before processing a PATCH request to modify the PPSECURITYPROFILEID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using...

PT-2025-48008

The Job Board by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.1. This is due to the plugin storing the entire unsanitized $ GET superglobal array directly into the database via update user meta when users save search...

CVE-2025-64064

CVE-2025-64064 affects Primakon Pi Portal 1.0.18 via the /api/v2/pp_users endpoint. A PATCH request that modifies PP_SECURITY_PROFILE_ID can bypass permissions checks, allowing a low-privilege user to elevate to Administrator. Core issue is weak access control around the PP_SECURITY_PROFILE_ID pa...

PT-2025-48072

Primakon Pi Portal 1.0.18 /api/v2/pp users endpoint fails to adequately check user permissions before processing a PATCH request to modify the PP SECURITY PROFILE ID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using PP...

CVE-2025-29933

creationtimestamp| type| source ---|---|--- 2025-11-24 22:03:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ftemkp252w...

CVE-2025-48511

creationtimestamp| type| source ---|---|--- 2025-11-24 21:58:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ft3o3rt32a...

CVE-2018-25126

creationtimestamp| type| source ---|---|--- 2025-11-24 21:42:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6fs6zb5u42s 2025-11-25 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6iagpdgjq2b 2025-12-03 14:27:58+00:00| seen|...

CVE-2025-63434

creationtimestamp| type| source ---|---|--- 2025-11-24 21:23:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6fr4ibryt26...

CVE-2025-65675

creationtimestamp| type| source ---|---|--- 2025-11-24 21:00:05+00:00| published-proof-of-concept| Telegram/Du0MdwVxk-ma0lPRgOSkwKDcmvhNbHj6kmNSaYCuL7u0A 2025-11-26 23:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kxyp2kf22k...

CVE-2025-65670

creationtimestamp| type| source ---|---|--- 2025-11-24 21:00:05+00:00| published-proof-of-concept| Telegram/Du0MdwVxk-ma0lPRgOSkwKDcmvhNbHj6kmNSaYCuL7u0A 2025-11-26 23:14:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kybcv7es2w...

CVE-2025-13466

creationtimestamp| type| source ---|---|--- 2025-11-24 18:40:14+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3m6fhz63cvk2n 2025-11-24 18:44:17+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3m6fiagi6fc2n...

CVE-2025-56401

creationtimestamp| type| source ---|---|--- 2025-11-24 17:57:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ffnovxf22a...

CVE-2025-60914

creationtimestamp| type| source ---|---|--- 2025-11-24 17:53:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ffeqdlpb2u...

CVE-2025-40212

creationtimestamp| type| source ---|---|--- 2025-11-24 13:28:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ewmfuijt2q 2025-11-24 15:15:49+00:00| seen| https://gist.github.com/Darkcrai86/02e0a9672ed1cc664721e2a3ff5fa46f...

CVE-2025-41016

creationtimestamp| type| source ---|---|--- 2025-11-24 13:18:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ew2jmocj2u 2025-11-24 15:05:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115605290787765122...

EUVD-2025-198629

Cross-Site Scripting XSS vulnerability stored in tha Taclia web application, where the uploaded SVG images are not properly sanitized. This allows to the attackers to embed malicious scripts in SVG files such as image profiles, which are then stored on the server and executed in the context of an...

CVE-2025-63735

creationtimestamp| type| source ---|---|--- 2025-11-24 09:00:05+00:00| published-proof-of-concept| Telegram/oYZTYWvqZacMJFzrrVg-TgNvCXWrfnK8e9lmZuskv6Wj3lc 2025-11-26 01:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ioq544hv2k...