CVE-2025-2099

creationtimestamp| type| source ---|---|--- 2025-05-19 11:44:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpjin4nwpvv2 2025-05-19 13:12:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnlrnrqb24...

CVE-2025-4930

creationtimestamp| type| source ---|---|--- 2025-05-19 11:38:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16839 2025-05-19 13:13:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnkiteo2o...

CVE-2025-4927

A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/between-dates-application-report.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to...

CVE-2025-4925

creationtimestamp| type| source ---|---|--- 2025-05-19 09:38:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16835 2025-05-19 13:13:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnkb4pp2s...

CVE-2025-47758

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16822 2025-05-19 09:13:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpja7zwrxy2n...

CVE-2025-47760

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16820 2025-05-19 09:13:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjaa24zye2h...

WordPress WooCommerce Checkout & Funnel Builder by FunnelKit plugin < 3.10.2 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Francisco Alisson in WordPress Plugin Funnel Builder by FunnelKit versions 3.10.2...

CVE-2025-4907

creationtimestamp| type| source ---|---|--- 2025-05-19 03:38:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16799 2025-05-19 05:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissinmex2p...

CVE-2025-4908

creationtimestamp| type| source ---|---|--- 2025-05-19 03:38:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16798 2025-05-19 05:13:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissik3jk2o...

CVE-2025-4909

creationtimestamp| type| source ---|---|--- 2025-05-19 03:38:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16796 2025-05-19 05:13:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissid4ty2l...

CVE-2025-31221

creationtimestamp| type| source ---|---|--- 2025-05-19 03:23:01+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lpimn42o5k2k 2026-04-02 22:17:09+00:00| seen| Telegram/B6vWUmFTVCX1yfhELfHqaTN2Gx6ui5cUH0-W9-255yNy0M...

CVE-2025-23164

creationtimestamp| type| source ---|---|--- 2025-05-19 02:38:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16794 2025-05-19 05:13:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpisshpbfi24 2026-07-12 22:00:07+00:00| seen| https://t.me/securixykz/1146 2026-07-13...

CVE-2025-23166

The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary...

WordPress Push Notification for Post and BuddyPress plugin <= 1.93 - Multiple Unauthenticated SQLi vulnerability

Multiple Unauthenticated SQLi vulnerability discovered by Project Black in WordPress Plugin Push Notification for Post and BuddyPress versions = 1.93...

WordPress Easy Property Listings plugin <= 3.5.3 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by cyc707 in WordPress Plugin Easy Property Listings versions = 3.5.3...

WordPress LearnPress plugin < 4.2.7.5.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin LearnPress versions 4.2.7.5.1...

WordPress WP ERP plugin < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information vulnerability

Custom+ Unauthorized Access to Terminated Employee Information vulnerability discovered by Pedro Cuco Illex in WordPress Plugin WP ERP versions 1.13.4...

PT-2025-22041

Name of the Vulnerable Software and Affected Versions: libsoup affected versions not specified Description: A flaw was found in the cookie parsing logic of the libsoup HTTP library, which is used in GNOME applications and other software. The issue arises when processing the expiration date of...

Debian: Security Advisory (DSA-5923-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1401)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...