CVE-2026-0571

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...

CVE-2026-0571

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...

CVE-2025-62840 HBS 3 Hybrid Backup Sync

A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following...

CVE-2025-15424

creationtimestamp| type| source ---|---|--- 2026-01-02 04:33:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbg2vkqh3y2r 2026-01-02 18:53:53+00:00| published-proof-of-concept| Telegram/06q-TvAKXAyL-ZabO-7p63z6qQH9ntO7cFX9ghbvmNNE5E 2026-01-02 21:55:41+00:00|...

CVE-2025-11961

creationtimestamp| type| source ---|---|--- 2026-01-02 00:01:41+00:00| seen| https://bsky.app/profile/slackers.it/post/3mbfloxy2422a 2026-01-09 13:55:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbynjr2oyn22 2026-01-10 20:53:09+00:00| seen|...

PT-2026-1126

Name of the Vulnerable Software and Affected Versions yeqifu warehouse affected versions not specified Description A security flaw exists in yeqifu warehouse due to path traversal. The issue is related to the manipulation of the path argument within the createResponseEntity function located in th...

CVE-2025-13029

The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users...

CVE-2025-22189

creationtimestamp| type| source ---|---|--- 2026-01-01 04:37:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbdkmhyy2q2x...

CVE-2025-67709

creationtimestamp| type| source ---|---|--- 2026-01-01 01:06:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd6tyvcak2c 2026-01-02 02:25:33+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mbftqanq7x2d 2026-01-02 08:00:19+00:00| seen|...

CVE-2025-69412

creationtimestamp| type| source ---|---|--- 2026-01-01 00:32:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd4wvviop2g...

EUVD-2025-206056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin & Your native, mobile iPhone App and Android App allows Reflected XSS.This issue affects Blappsta Mobile App Plugin Your native, mobile iPhone App and Android...

CVE-2025-50053 WordPress Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App Plugin <= 0.8.8.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin & Your native, mobile iPhone App and Android App allows Reflected XSS.This issue affects Blappsta Mobile App Plugin Your native, mobile iPhone App and Android...

CVE-2025-50053

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App yournewsapp allows Reflected XSS.This issue affects Blappsta Mobile App Plugin – Your native, mobile iPhone App...

Exploit for Deserialization of Untrusted Data in Facebook React

CyberSec Blog CTF - React2Shell PoC Ce dépôt fournit un envir...

CVE-2025-62991

creationtimestamp| type| source ---|---|--- 2025-12-31 12:32:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbbup5v54v2g...

CVE-2025-68988

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in o2oe E-Invoice App Malaysia einvoiceapp-malaysia allows Retrieve Embedded Sensitive Data.This issue affects E-Invoice App Malaysia: from n/a through = 1.3.0...

WordPress Knowband Mobile App Builder for wooCommerce plugin < 3.0.0 - Unauthenticated Arbitrary User Deletion vulnerability

Unauthenticated Arbitrary User Deletion vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Knowband Mobile App Builder versions 3.0.0...

CVE-2025-13029 Knowband Mobile App Builder for wooCommerce < 3.0.0 – Unauthenticated Arbitrary User Deletion

The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users...

CVE-2025-13029 Knowband Mobile App Builder for wooCommerce < 3.0.0 – Unauthenticated Arbitrary User Deletion

The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users...

CVE-2025-13029

CVE-2025-13029 concerns the Knowband Mobile App Builder for WordPress (WooCommerce) before version 3.0.0. The issue is a lack of authorization on the REST API endpoint used to delete users, allowing unauthenticated attackers to delete arbitrary users. Publicly disclosed details across multiple co...