Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

PHPGurukul Complaint Management System 注入漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Status in the file /admin/updatecomplaint.php. An attacker can...

CVE-2025-26453

creationtimestamp| type| source ---|---|--- 2025-06-04 23:27:49+00:00| seen| https://bsky.app/profile/newshoundai.bsky.social/post/3lqsxg7fqc32x...

CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...

CVE-2025-48960

creationtimestamp| type| source ---|---|--- 2025-06-04 14:21:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqryti3u2fg2 2025-06-04 16:43:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqsaszsiid25 2025-06-04...

CVE-2025-25020

creationtimestamp| type| source ---|---|--- 2025-06-03 16:36:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqppupyhjsj2...

CVE-2025-5497

creationtimestamp| type| source ---|---|--- 2025-06-03 14:02:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqphctv4j3i2...

CVE-2025-27811

creationtimestamp| type| source ---|---|--- 2025-06-03 09:14:27+00:00| seen| https://gist.github.com/leonjza/829a98f6c0954d7cb3f6614d05f87f37 2025-06-04 15:13:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqs3rujlhqx2 2025-06-04...

CVE-2025-5489

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-1485

creationtimestamp| type| source ---|---|--- 2025-06-02 06:31:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5ogyxvli2 2025-06-02 08:46:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqmfaxn7iq2m...

CVE-2025-3951 WP-Optimize < 4.2.0 - Admin+ SQLi

The WP-Optimize WordPress plugin before 4.2.0 does not properly escape user input when checking image compression statuses, which could allow users with the administrator role to conduct SQL Injection attacks in the context of Multi-Site WordPress configurations...

CVE-2025-37090

creationtimestamp| type| source ---|---|--- 2025-06-02 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-313/ 2025-06-02 13:42:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114614060543344731 2025-06-02 14:39:58+00:00| seen|...

PT-2025-23469 · WordPress · Wp-Optimize

Name of the Vulnerable Software and Affected Versions: WP-Optimize versions prior to 4.2.0 Description: The issue arises from improper escaping of user input when checking image compression statuses. This could allow users with the administrator role to conduct SQL Injection attacks, particularly...

NetScaler: FQDN based service is Down

FQDN based service is not coming UP and showing Server State as DOWN The Monitor status might be "Domain name not resolved" But from CLI, if you tried to resolve the hostname it might show the response...

NetScaler 14.1 - STA server marked down

STA server status is Down on Gateway vserver though it is reachable from the NetScaler...

CVE-2025-4985

creationtimestamp| type| source ---|---|--- 2025-05-30 14:33:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfh6ovptzc2 2025-05-30 14:34:52+00:00| seen|...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14387)

FreeFloat FTP Server is an FTP service from FreeFloat. FreeFloat FTP Server suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking in the component STATUS command handler. No detailed vulnerability details are provided at this time...

CVE-2025-37999

creationtimestamp| type| source ---|---|--- 2025-05-29 13:51:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqcuf2yz4fn2...

RHEL 9 : firefox (RHSA-2025:8293)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8293 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

ALSA-2025:8308 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details CVE-2025-5267 firefox: thunderbird: Potential local code execution ...