QGIS QWC2 Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...

CVE-2025-11671

creationtimestamp| type| source ---|---|--- 2025-10-13 08:13:42+00:00| seen| Telegram/424jmxFnmD3-QZBx3TYLc8blE71ZYgdkUCSrnxvFWI4FCEo...

CVE-2025-10552

creationtimestamp| type| source ---|---|--- 2025-10-13 08:13:37+00:00| seen| Telegram/BfNOQEW6DeJUKOC7RMZRp7ey-OCqnqNoJBCAFbDAuT0s...

CVE-2025-10557

creationtimestamp| type| source ---|---|--- 2025-10-13 08:13:35+00:00| seen| Telegram/WM72dKC9JfGAo4CSStxbpLJ2VPHuwP9d0ucsocDyuRJiGyg...

CVE-2025-61593

creationtimestamp| type| source ---|---|--- 2025-10-13 07:14:20+00:00| seen| https://bsky.app/profile/gadievron.bsky.social/post/3m32o43aeus2v...

CVE-2025-61592

creationtimestamp| type| source ---|---|--- 2025-10-13 07:14:20+00:00| seen| https://bsky.app/profile/gadievron.bsky.social/post/3m32o43aeus2v...

CVE-2025-11649

creationtimestamp| type| source ---|---|--- 2025-10-13 06:03:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m32k5sehoi2a...

CVE-2025-31995

creationtimestamp| type| source ---|---|--- 2025-10-13 05:16:00+00:00| seen| Telegram/hhP5M9-XyBsDhkH5Vsgo1X2s5smFSSIeLvWLsQKIaVz70...

CVE-2025-24528

creationtimestamp| type| source ---|---|--- 2025-10-13 02:31:28+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3m326cbeeek25...

Aykome License Tracking System 安全漏洞

Aykome License Tracking System is a license management system from Aykome Turkey. A security vulnerability exists in Aykome License Tracking System versions prior to 06.10.2025, which stems from improper neutralization of a special element and could lead to an SQL injection attack...

CVE-2022-25844

creationtimestamp| type| source ---|---|--- 2025-10-12 21:00:05+00:00| published-proof-of-concept| Telegram/wZtUpGBhAyZXbyy1Dz1CYSOkIDUJFs2hLHFbC2-fAsAzWE 2025-10-14 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m36mtqs2ss2p 2026-01-14 18:54:12+00:00| seen|...

CVE-2025-11643

creationtimestamp| type| source ---|---|--- 2025-10-12 20:16:34+00:00| seen| Telegram/Yy4fMccnVjihuDJQNcZhVu7TyJxXBgqcbVANSvvHGTR6ClQ...

CVE-2017-5941

creationtimestamp| type| source ---|---|--- 2025-10-12 15:00:06+00:00| published-proof-of-concept| Telegram/nHH3EPNLC7cR6YqxoW514LvTLwhWMDWIdjARrLyJXH8zbM 2026-07-29 12:00:32+00:00| seen| https://t.me/CVEhub/12576 2026-07-30 00:00:57+00:00| seen| https://t.me/CVEhub/12576 2026-07-31 00:00:08+00:0...

CVE-2025-58287

creationtimestamp| type| source ---|---|--- 2025-10-11 09:16:57+00:00| seen| Telegram/kmjuKfn41MRsce8zAIF3MLxJ0ho7Ipf0hb9FwZthKDgLD-c...

CVE-2025-58292

creationtimestamp| type| source ---|---|--- 2025-10-11 09:16:17+00:00| seen| Telegram/Z7udfdmVUkpFZL1u5aAyuczZD5o6XUVDt4VHy1BtwNups...

WordPress Date counter plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Date counter versions = 2.0.3...

CVE-2025-11555

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendarofevents.php. The manipulation of the argument datestart results in sql injection. The attack may be launched remotely. The exploit is now public and may be use...

CVE-2025-8887

creationtimestamp| type| source ---|---|--- 2025-10-10 14:14:12+00:00| seen| Telegram/GbNsUcwlRmzNL6q6aVrf1vCbl43mgpwKVVQzqx-D35aKXfQ...

CVE-2025-61858

creationtimestamp| type| source ---|---|--- 2025-10-10 11:11:46+00:00| seen| Telegram/0KAa8kRz5WJTsPjpNj4bHz7JCsbL4ghRZuBOizlDQ9o2GBw...

CVE-2025-61864

creationtimestamp| type| source ---|---|--- 2025-10-10 11:11:33+00:00| seen| Telegram/EywbdbwILkRcixnjx48HWCddvcDvVfdqB7ZvMb2uaTkAq4...