WordPress The Barber Shop theme <= 1.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme The Barber Shop versions = 1.9...

WordPress Plan My Day theme <= 1.1.13 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Plan My Day versions = 1.1.13...

Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'

...

CVE-2025-9939

creationtimestamp| type| source ---|---|--- 2025-09-04 09:20:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxysyibejw2e...

drm/i915/gt: Cleanup partial engine discovery failures

...

PT-2025-36016

Name of the Vulnerable Software and Affected Versions: sdp discovery.cc affected versions not specified Description: An out-of-bounds read issue exists in the add attr function of sdp discovery.cc due to a missing bounds check. This could lead to remote information disclosure and does not require...

CVE-2025-58458

In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying amazon-s3 protocol for use with JGit, allowing attackers with Overall/Read permission to check f...

CVE-2025-9834

creationtimestamp| type| source ---|---|--- 2025-09-03 01:49:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvjcbvxxj2j...

WordPress Harper theme <= 1.13 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Harper versions = 1.13...

WordPress Manufactory theme <= 1.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Manufactory versions = 1.4...

CVE-2025-55007

creationtimestamp| type| source ---|---|--- 2025-09-01 17:19:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxs4denake2n...

CVE-2009-20010

Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail subsystem. The vulnerability arises from unsanitized user input passed via a POST request to the data parameter, which is processed by the underlying shell without adequate...

Router-Exploiter

Router-Exploiter A powerful and stealthy penetration testing t...

Linux Distros Unpatched Vulnerability : CVE-2025-38593

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: fix double free in 'hcidiscoveryfilterclear' Function...

WordPress Woo Hoo theme <= 1.25 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Woo Hoo versions = 1.25...

CVE-2025-22411

In processserviceattrrsp of sdpdiscovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22403

In sdpsndservicesearchreq of sdpdiscovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-0074

In processserviceattrrsp of sdpdiscovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

WordPress Finag theme <= 1.5.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Finag versions = 1.5.0...

Linux Distros Unpatched Vulnerability : CVE-2023-26735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blackboxexporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports...