GHSA-MMXM-8W33-WC4H

creationtimestamp| type| source ---|---|--- 2025-08-20 19:47:18+00:00| seen| https://seclists.org/oss-sec/2025/q3/131...

CVE-2025-48298

creationtimestamp| type| source ---|---|--- 2025-08-20 18:11:04+00:00| seen| Telegram/FmUQPMHo-gUjwkOAc9bOfqOFct4KSrAJGWrZgDZ1q66lk...

CVE-2025-8309

creationtimestamp| type| source ---|---|--- 2025-08-20 17:23:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115062251535912421 2025-08-20 20:33:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwublo5aup25...

CVE-2025-50904

There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 2025-06-11. An attacker can exploit this vulnerability to access /admin/ API without any token...

CVE-2025-43741

creationtimestamp| type| source ---|---|--- 2025-08-20 12:08:29+00:00| seen| Telegram/OBEmwvjAIDyxVOwqRICy4WobqeV76wqKIypjYagpBb-F2w...

CVE-2025-9228

creationtimestamp| type| source ---|---|--- 2025-08-20 09:11:43+00:00| seen| Telegram/mdFm9mGwOTe0Xltjb6MxbPaL4Tjostx7fRinxlLn4Ec...

WordPress Colorbox Lightbox Plugin <= 1.1.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy in WordPress Plugin Colorbox Lightbox versions = 1.1.5...

CVE-2025-49381

creationtimestamp| type| source ---|---|--- 2025-08-20 09:01:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwt2vunb4i2g...

CVE-2025-57744

creationtimestamp| type| source ---|---|--- 2025-08-20 06:33:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwssmnsezk2d...

CVE-2025-23318

creationtimestamp| type| source ---|---|--- 2025-08-20 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-851/...

CVE-2025-9273

creationtimestamp| type| source ---|---|--- 2025-08-20 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-852/ 2025-09-02 23:26:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvbcfh5zn2p...

SUSE: Security Advisory (SUSE-SU-2025:02846-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Visitor Management System query_data.php File SQL Injection Vulnerability

Visitor Management System is a visitor access management system. Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter dateF/dateP in the file /querydata.php. An attacker can exploit...

WordPress Sala Theme <= 1.1.6 is vulnerable to Local File Inclusion

Software Sala Type Theme Vulnerable versions = 1.1.6 Fixed in 1.1.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-54709 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 734caf3a58cf Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

CVE-2025-55295

creationtimestamp| type| source ---|---|--- 2025-08-19 20:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwrr3s522b2g...

CVE-2025-50891

creationtimestamp| type| source ---|---|--- 2025-08-19 20:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwrqavgsbl2d...

CVE-2025-51489

creationtimestamp| type| source ---|---|--- 2025-08-19 18:22:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwrjszwulh2d...

CVE-2025-8450

creationtimestamp| type| source ---|---|--- 2025-08-19 18:09:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115056767086664156...

CVE-2025-38576

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the same general nature: A second class of oops is als...

CVE-2025-38584

In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in padatareorder that goes back to the initial commit. A reference count is taken at the start of the process in padatadoparallel, and released at the end in...