CVE-2025-6092

creationtimestamp| type| source ---|---|--- 2025-06-15 17:36:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18383 2025-06-15 21:28:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrofur5ojm2r...

CVE-2024-25573

Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing...

CVE-2025-21085

PingFederate CVE-2025-21085 describes a grant attribute duplication issue in the PostgreSQL persistence store that can cause excessive memory utilization for OAuth2 requests. The affected product is PingFederate; the root cause is duplication in the OAuth2 grant storage within PostgreSQL, leading...

CVE-2025-21085 PingFederate OAuth Grant attribute duplication may use excessive memory

PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization...

CVE-2025-4584

The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmeventlist' shortcode in all versions up to, and including, 1.2.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CGA-XPVR-G266-8G9G

Bulletin has no description...

CGA-XJVP-6V8Q-GHCH

Bulletin has no description...

CGA-6JJH-GP68-PHGC

Bulletin has no description...

CGA-P935-78H5-WQ59

Bulletin has no description...

CGA-5XQ6-2W6X-VM43

Bulletin has no description...

CVE-2025-6070

CVE-2025-6070 (Restrict File Access plugin for WordPress) is a directory traversal vulnerability (via output()) exploitable by authenticated users with Subscriber+ privileges to read arbitrary server files on all versions up to 1.1.2. The connected documents confirm the attack vector is local fil...

CVE-2025-50145

creationtimestamp| type| source ---|---|--- 2025-06-14 07:36:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkgvqkp4t2k...

CVE-2025-50147

creationtimestamp| type| source ---|---|--- 2025-06-14 07:08:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkfeq4rbb2a...

CVE-2025-48964

creationtimestamp| type| source ---|---|--- 2025-06-13 18:04:24+00:00| seen| https://gist.github.com/EbonJaeger/94d6b11fee980a997a2d1e6007418f90 2025-07-21 22:00:41+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luiyhkfkkc2y 2025-07-21 22:21:22+00:00| seen|...

CVE-2025-49581

creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18306 2025-06-13 17:05:18+00:00| published-proof-of-concept| Telegram/LbSE4ui0deWaIbAIySI6HyoY8sH4t9aZhKhv-gkpgMW3iE 2025-06-13 17:27:29+00:00| seen|...

CVE-2025-36633

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation...

CVE-2025-45987

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bsSetDNSInfo...

CVE-2025-45986

creationtimestamp| type| source ---|---|--- 2025-06-13 11:33:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18290 2025-06-13 15:13:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lripzfawgp2a 2025-06-13 16:08:21+00:00| published-proof-of-concept|...

CVE-2025-29902

Remote code execution that allows unauthorized users to execute arbitrary code on the server machine...

CVE-2025-46783

creationtimestamp| type| source ---|---|--- 2025-06-13 08:34:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18283 2025-06-13 09:31:46+00:00| seen| Telegram/o1ZTzABdZN3OAzUP6RsYm0T2XzE-gKGKO27WNgsxHNfYZg 2025-06-13 12:13:44+00:00| seen|...