CVE-2025-6375

creationtimestamp| type| source ---|---|--- 2025-06-21 00:45:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19087 2025-06-21 01:56:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls3h6jizrc2v...

CVE-2025-47869

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache NuttX RTOS apps/exapmles/xmlrpc application. In this example application device stats structure that stored remotely provided parameters had hardcoded buffer size which could lead to...

CVE-2025-47869 Apache NuttX RTOS: examples/xmlrpc: Fix calls buffers size.

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache NuttX RTOS apps/exapmles/xmlrpc application. In this example application device stats structure that stored remotely provided parameters had hardcoded buffer size which could lead to...

CVE-2025-47869 Apache NuttX RTOS: examples/xmlrpc: Fix calls buffers size.

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache NuttX RTOS apps/exapmles/xmlrpc application. In this example application device stats structure that stored remotely provided parameters had hardcoded buffer size which could lead to...

CVE-2025-47869

CVE-2025-47869 affects Apache NuttX RTOS, specifically the apps/examples/xmlrpc component. A device stats structure stored remotely provided parameters using hardcoded buffers can lead to a buffer overflow. The buffers were corrected to CONFIG_XMLRPC_STRINGSIZE+1 in the release 12.9.0 example, af...

CVE-2025-47869 Apache NuttX RTOS: examples/xmlrpc: Fix calls buffers size.

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache NuttX RTOS apps/exapmles/xmlrpc application. In this example application device stats structure that stored remotely provided parameters had hardcoded buffer size which could lead to...

MINI-5R6W-965M-MC7V

Bulletin has no description...

CGA-XR5P-WF3H-JF54

Bulletin has no description...

WordPress Game Review Block plugin <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via className Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Game Review Block versions = 4.8.1...

CVE-2025-5923

The WordPress plugin Game Review Block (versions up to and including 4.8.1) is affected by a Stored Cross-Site Scripting (Stored XSS) vulnerability in the className parameter due to insufficient input sanitization and output escaping. Exploitation requires Contributor-level access or higher, and ...

CVE-2025-5923 Game Review Block <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter

The Game Review Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 4.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-5923 Game Review Block <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter

The Game Review Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 4.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

WordPress plugin Game Review Block 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

PT-2025-25389 · WordPress · Game Review Block

Name of the Vulnerable Software and Affected Versions: The Game Review Block plugin for WordPress versions up to, and including, 4.8.1 Description: The issue is related to Stored Cross-Site Scripting via the className parameter due to insufficient input sanitization and output escaping. This allo...

GHSA-HQ9P-PM7W-8P54

creationtimestamp| type| source ---|---|--- 2025-06-11 20:15:58+00:00| seen| Telegram/nn4r48fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw 2025-06-17 13:11:06+00:00| seen| https://gist.github.com/safer-bot/227b935768f4907b3da218450ed38465 2025-07-07 04:47:43+00:00| seen|...

GHSA-9H3V-H59J-V6RJ

creationtimestamp| type| source ---|---|--- 2025-06-11 18:34:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18110 2025-06-11 18:49:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114666228731243092...

AI-Based Software Vulnerability Detection: a Systematic Literature Review

Software vulnerabilities in source code pose serious cybersecurity risks, prompting a shift from traditional detection methods e.g., static analysis, rule-based matching to AI-driven approaches. This study presents a systematic review of software vulnerability detection SVD research from 2018 to...

CVE-2025-47160

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-11 17:23:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114665888991677107 2026-06-15 18:12:54+00:00| seen|...

CVE-2025-47163

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 19:29:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbmvrxite2o 2025-06-10 23:33:07+00:00| seen|...

CVE-2025-47171

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 17:32:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17949 2025-07-17 21:02:35+00:00| seen|...