CVE-2025-49485

creationtimestamp| type| source ---|---|--- 2025-07-18 12:14:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luagd54w3l2i...

CVE-2025-6233

Mattermost versions 10.8.x = 10.8.1, 10.7.x = 10.7.3, 10.5.x = 10.5.7, 9.11.x = 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal...

CVE-2025-5800

creationtimestamp| type| source ---|---|--- 2025-07-18 08:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua3eaibq72w...

CVE-2025-7648

creationtimestamp| type| source ---|---|--- 2025-07-18 08:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua2re3d7u2t...

CVE-2025-7444

CVE-2025-7444 affects LoginPress Pro for WordPress. Versions up to and including 5.0.1 suffer an authentication bypass due to insufficient verification of the user returned by the social login token, enabling unauthenticated attackers to log in as any existing user (e.g., administrator) if they h...

WordPress aapanel WP Toolkit plugin 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() Function vulnerability

WordPress aapanel WP Toolkit plugin 1.0 - 1.1 - Missing Authorization to Authenticated Subscriber+ Privilege Escalation via autologin Function vulnerability discovered by kr0d in WordPress Plugin aapanel WP Toolkit versions 1.0 - 1.1...

CVE-2025-7431

creationtimestamp| type| source ---|---|--- 2025-07-18 02:50:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu7gs72bqb2w 2025-08-24 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lx6f2ofybv2t...

CVE-2025-7759

creationtimestamp| type| source ---|---|--- 2025-07-18 01:20:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu7brth27e2b...

CVE-2025-23269

creationtimestamp| type| source ---|---|--- 2025-07-18 00:56:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu7agcxgyh2j...

CVE-2025-50583

CVE-2025-50583 concerns a cross-site scripting (XSS) vulnerability in StudentManage v1.0, arising from the Add A New Student module. The available documents indicate the affected software is a student management system, with the root cause described as mishandling user input in that module, enabl...

CVE-2025-52169

agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain a reflected cross-site scripting XSS vulnerability...

CVE-2025-34132

creationtimestamp| type| source ---|---|--- 2025-07-17 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdlgqwg2c...

CVE-2024-41921

A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'echo' verb, which allows a user to introspect a ROS topic and accepts a user-provided Python...

CVE-2025-53816

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...

CVE-2025-50099

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2025-50093

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2025-50079

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...

CVE-2025-50089

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 9.0.0-9.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks ...

CVE-2025-50068

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Cluster execute...

IDFace: Face Template Protection for Efficient and Secure Identification

As face recognition systems FRS become more widely used, user privacy becomes more important. A key privacy issue in FRS is protecting the user's face template, as the characteristics of the user's face image can be recovered from the template. Although recent advances in cryptographic tools such...