GHSA-35C5-67FM-CPCP WP Crontrol Authenticated (Administrator+) plugin vulnerable to Blind Server-Side Request Forgery

Impact The WP Crontrol plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in versions 1.17.0 to 1.19.1 via the wpremoterequest function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations...

CVE-2025-4044

Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL...

CVE-2025-4044

Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL...

CVE-2025-4044

CVE-2025-4044 affects Lexmark printer drivers (notably the Lexmark Universal Print Driver) for Windows. The issue is an improper restriction of XML External Entity (XXE) references in the driver’s handling of XML, allowing an attacker to disclose sensitive information to an arbitrary URL. The CVE...

CVE-2025-57718

creationtimestamp| type| source ---|---|--- 2025-08-19 07:08:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwqe4hqx7p2a...

[SECURITY] Fedora 42 Update: uv-0.8.8-1.fc42

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

Linux Distros Unpatched Vulnerability : CVE-2025-49091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// o...

Linux Distros Unpatched Vulnerability : CVE-2017-5072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL...

PT-2025-33828

Name of the Vulnerable Software and Affected Versions: Astro versions prior to 5.13.2 Astro versions prior to 4.16.18 Description: Astro is a web framework for content-driven websites. The image optimization endpoint in projects deployed with on-demand rendering allows images from unauthorized...

Linux Distros Unpatched Vulnerability : CVE-2024-22259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL e.g. through a query parameter AND perform validation checks ...

Linux Distros Unpatched Vulnerability : CVE-2021-27927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2, the CControllerAuthenticationUpda...

Malicious code in flask-tdg-cyberx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d5dae82b81352867ea79466352b02c279be8b7ca2f0415f0534058e20b943436 Package is prepared for exfiltration of detailed data about the running system. The exact behaviour depends on the version: some does nothing, some exfiltrate...

CVE-2025-9088

creationtimestamp| type| source ---|---|--- 2025-08-17 01:31:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwkqerlt6h2g...

CVE-2025-38508

creationtimestamp| type| source ---|---|--- 2025-08-16 12:07:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwjdgodwp42u...

CVE-2025-6079

creationtimestamp| type| source ---|---|--- 2025-08-16 04:31:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwijxq2bav2q 2026-04-08 23:31:21+00:00| seen| Telegram/uDb8p1iskXO6Pq5CJ62NBhUvl5M2Dmbo-CUN4HEs8fpntc...

CVE-2023-21329

creationtimestamp| type| source ---|---|--- 2025-08-15 02:10:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwfrn4cxzud2...

Linux Distros Unpatched Vulnerability : CVE-2018-6790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP...

CVE-2025-51986

creationtimestamp| type| source ---|---|--- 2025-08-14 19:54:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwf4mrhfye2t...

CVE-2025-20268

A vulnerability in the Geolocation-Based Remote Access RA VPN feature of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies to allow or deny HTTP connections based on a country or region. This vulnerability exists becaus...

CVE-2025-20268 Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability

A vulnerability in the Geolocation-Based Remote Access RA VPN feature of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies to allow or deny HTTP connections based on a country or region. This vulnerability exists becaus...