CVE-2025-5269

Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 128.11 and Thunderbird 128.11...

CVE-2025-5262

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17631 2025-05-27 14:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq5tzngqwq2s 2025-05-28 16:03:10+00:00| seen|...

CVE-2025-5267

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17626 2025-05-27 13:16:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5rfko3exm2 2025-05-27 14:06:12+00:00| seen|...

CVE-2025-5270

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17623 2025-05-27 13:16:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5rf6rzkmm2 2026-04-13 17:55:48+00:00| seen|...

CVE-2025-23393

creationtimestamp| type| source ---|---|--- 2025-05-27 07:48:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17610 2025-05-27 08:02:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq57xkimdv62 2025-05-27 10:04:39+00:00| seen|...

CVE-2025-48828

creationtimestamp| type| source ---|---|--- 2025-05-27 04:47:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17607 2025-05-27 05:35:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4xrtm63mz2 2025-05-27...

GHSA-2XV9-GHH9-XC69

creationtimestamp| type| source ---|---|--- 2025-05-27 04:47:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17604...

CVE-2025-5224

creationtimestamp| type| source ---|---|--- 2025-05-27 03:36:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4r3kavux52...

CVE-2025-5226

creationtimestamp| type| source ---|---|--- 2025-05-27 03:36:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4r3iw7zj52 2025-05-27 13:48:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17632...

CVE-2025-5227

creationtimestamp| type| source ---|---|--- 2025-05-27 03:36:06+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4r3gk3cvj2 2025-05-27 03:47:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17599...

CVE-2025-5218

creationtimestamp| type| source ---|---|--- 2025-05-27 01:48:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17594 2025-05-27 03:36:31+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lq4r4gchxn52 2025-05-27...

CVE-2025-5219

creationtimestamp| type| source ---|---|--- 2025-05-27 01:48:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17593 2025-05-27 03:36:31+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lq4r4bu76hz2 2025-05-27...

WordPress MStore API plugin <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation vulnerability

Missing Authorization to Authenticated Subscriber+ Posts Creation vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin MStore API versions = 4.17.5...

CVE-2025-5216

creationtimestamp| type| source ---|---|--- 2025-05-27 00:47:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17589 2025-05-27 04:01:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq4siw6ziu2j...

WordPress Order Delivery Date Missing Authorization

WordPress Order Delivery Date plugin versions prior to 12.3.1 have missing authorization and cross site request forgery vulnerabilities surrounding the importing of settings...

CVE-2025-5212

creationtimestamp| type| source ---|---|--- 2025-05-26 23:42:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4dwyoiprm2 2025-05-26 23:47:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17586 2025-05-27...

CVE-2025-4783

creationtimestamp| type| source ---|---|--- 2025-05-26 23:41:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4dwuvzd352 2025-05-26 23:47:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17585...

CVE-2025-5208

creationtimestamp| type| source ---|---|--- 2025-05-26 22:48:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17581 2025-05-26 23:42:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4dxdhyjnj2 2025-05-27...

CVE-2025-5205

A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affected is an unknown function of the file /dcwrentry.php. The manipulation of the argument Date leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-5126

A vulnerability was found in Teledyne FLIR AX8 up to 1.46.16. This vulnerability affects the function setDataTime of the file \usr\www\application\models\settingsregional.php. Performing manipulation of the argument year/month/day/hour/minute results in command injection. The attack may be...