CVE-2025-49286

Cross-Site Request Forgery CSRF vulnerability in WP Table Builder WP Table Builder wp-table-builder allows Cross Site Request Forgery.This issue affects WP Table Builder: from n/a through = 2.0.6...

CVE-2025-5737

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-49599

Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3...

CVE-2024-9993

creationtimestamp| type| source ---|---|--- 2025-06-07 15:02:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqzmm6i6cf2o...

CVE-2025-5568

creationtimestamp| type| source ---|---|--- 2025-06-07 14:57:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqzmd7zs4b2q 2025-06-09 16:56:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17710...

CVE-2025-5303

creationtimestamp| type| source ---|---|--- 2025-06-07 09:00:31+00:00| seen| Telegram/lbBT3Ka5NzfRpwiXXrHSol6lP59mozpVG3czfgGZF2Dkc 2025-06-07 12:52:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqzfdjvu652m...

CVE-2025-49619

Skyvern through 0.1.85 is vulnerable to server-side template injection SSTI in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to...

CVE-2025-38000

A flaw was found in the HFSC queueing discipline implementation in the Linux kernel. When a packet is enqueued and the child qdisc's peek function is called before properly updating the HFSC queue's length and backlog counters, a race condition can occur. In some cases, the peek operation may...

CVE-2025-29876

File Station 5 is affected by a NULL pointer dereference (remote DoS) in versions prior to 5.5.6.4847. The issue can be triggered by a user account; upgrading to File Station 5 5.5.6.4847 and later resolves the vulnerability. The connected PT-2025-24300 entry confirms affected versions and the re...

CVE-2025-5765

creationtimestamp| type| source ---|---|--- 2025-06-06 15:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx5oyvnze2e...

CVE-2025-41646

An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device...

CVE-2025-5764

creationtimestamp| type| source ---|---|--- 2025-06-06 15:10:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx4l6vw5f2a...

CVE-2025-48961

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Windows before build 39938...

CVE-2025-5791

The CVE-2025-5791 entry concerns the Rust users crate with privilege escalation via incorrect group listing when a process has fewer than 1024 groups, which can incorrectly include the root group in the access list. Affected component: the user’s Rust crate (rust-users). Local/exploit path is ind...

CVE-2025-23969 WordPress KI Live Video Conferences plugin <= 5.5.15 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in whassan KI Live Video Conferences ki-live-video-conferences allows Retrieve Embedded Sensitive Data.This issue affects KI Live Video Conferences: from n/a through = 5.5.15...

CVE-2025-28984 WordPress Subscription Renewal Reminders for WooCommerce plugin <= 1.3.7 - Cross Site Request Forgery to Notice Dismissal vulnerability

Cross-Site Request Forgery CSRF vulnerability in storepro Subscription Renewal Reminders for WooCommerce allows Cross Site Request Forgery. This issue affects Subscription Renewal Reminders for WooCommerce: from n/a through 1.3.7...

CVE-2025-48783

creationtimestamp| type| source ---|---|--- 2025-06-06 11:02:40+00:00| seen| Telegram/IzUnLEyll0bCDFLZZ6Gvcvh0qc-X8AIjXpNZJHup4VBEb48 2025-06-06 11:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwptubx3v2r...

CVE-2025-48783

CVE-2025-48783 describes an external control of file name or path in the delete file function of Soar Cloud HRD Human Resource Management System, affected up to version 7.3.2025.0408. The vulnerability allows remote attackers to delete partial files by specifying arbitrary file paths. Exploitatio...

CVE-2025-5726

creationtimestamp| type| source ---|---|--- 2025-06-06 09:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwixpdxdu2o...

CVE-2025-5735

creationtimestamp| type| source ---|---|--- 2025-06-06 08:31:44+00:00| published-proof-of-concept| Telegram/2lxciVIudPRU1JELYymAPWJO5amPkWTwS2YjpxrD9s2lxPw 2025-06-06 10:18:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635904686208441...