CVE-2025-43586

creationtimestamp| type| source ---|---|--- 2025-06-10 16:31:31+00:00| seen| Telegram/57-ZwpsnCne6luO5PRV3ORhWnDZIYPtLViEm2vB0oS0gThM 2025-06-10 17:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbfxdm6tb2p...

GHSA-JJ54-8F66-C5PC

creationtimestamp| type| source ---|---|--- 2025-06-10 15:31:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17910 2025-06-10 15:56:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114659883686202262...

CVE-2025-33064

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 19:32:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbn2oetze2c...

CVE-2025-5353

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials...

CVE-2024-34711

GeoServer CVE-2024-34711 is an XML processing vulnerability caused by improper URI validation during XML External Entities (XEE) handling. The affected component relates to the internal URI filtering (PreventLocalEntityResolver) and a regex that can still enable an attacker to reach HTTP servers ...

CVE-2025-40659 Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS

An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp...

CVE-2025-5740

creationtimestamp| type| source ---|---|--- 2025-06-10 08:32:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17839 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-04 2025-07-10 09:08:22+00:00| seen|...

CVE-2025-4954

creationtimestamp| type| source ---|---|--- 2025-06-10 06:30:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17833 2025-06-10 09:34:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lraln5j3eu2q...

CVE-2025-4840

The CVE concerns the WordPress plugin inprosysmedia-likes-dislikes-post (versions up to 1.0.0). The root cause is failure to properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action that unauthenticated users can access. This leads to an unauthenticated SQL i...

CVE-2025-42988

creationtimestamp| type| source ---|---|--- 2025-06-10 03:36:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7xo75kej2s...

CVE-2025-47959

creationtimestamp| type| source ---|---|--- 2025-06-10 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-359/ 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-13 02:32:30+00:00| seen|...

CVE-2025-43574

creationtimestamp| type| source ---|---|--- 2025-06-10 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-338/ 2025-06-10 19:31:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17979 2025-06-12 22:25:49+00:00| seen|...

CVE-2025-42994

creationtimestamp| type| source ---|---|--- 2025-06-10 01:33:53+00:00| seen| Telegram/VjI6o5iinQgIrx0kweQ6vZ4ijUEDsimPFeQ2gUe4Yzczac 2025-06-10 03:17:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7wlicz7o2c...

CVE-2025-42982

creationtimestamp| type| source ---|---|--- 2025-06-10 01:33:53+00:00| seen| Telegram/VjI6o5iinQgIrx0kweQ6vZ4ijUEDsimPFeQ2gUe4Yzczac 2025-06-10 03:31:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7xfanaiq23 2025-06-10 04:44:33+00:00| seen|...

CVE-2025-42991

SAP S/4HANA Bank Account Application does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the...

CVE-2025-42982

SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. This causes high impact on confidentiality, integrity and availability of the application...

CVE-2025-42988 Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no...

CVE-2025-42983 Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any...

CVE-2025-0036

The CVE concerns AMD Versal Adaptive SoC devices where the Secure Stream Switch (SSS) configuration is not cleared after a cryptographic operation in the Platform Loader and Manager (PLM) during post-boot runtime. This improper SSS setup can lead to data being written to or read from invalid memo...

CVE-2025-0037

The CVE-2025-0037 issue affects AMD Versal Adaptive SoC devices, arising from lack of address validation when PLM runtime services are executed via the PLM firmware. This could allow a remote processor to access isolated or protected memory spaces, compromising confidentiality and integrity (impa...