CVE-2025-5734

creationtimestamp| type| source ---|---|--- 2025-06-06 08:31:44+00:00| published-proof-of-concept| Telegram/2lxciVIudPRU1JELYymAPWJO5amPkWTwS2YjpxrD9s2lxPw 2025-06-06 10:18:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635904686208441...

CVE-2025-3365 Relative Path Traversal in OnlineSuite

A missing protection against path traversal allows to access any file on the server...

CVE-2025-5734 TOTOLINK X15 HTTP POST Request formWlanRedirect buffer overflow

A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The atta...

CVE-2025-5563 WP-Addpub <= 1.2.8 - Authenticated (Contributor+) SQL Injection

The WP-Addpub plugin for WordPress is vulnerable to SQL Injection via the 'wp-addpub' shortcode in all versions up to, and including, 1.2.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-5715

creationtimestamp| type| source ---|---|--- 2025-06-06 05:08:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw2vuxfr22s 2025-06-06 10:10:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635874812023399...

CVE-2025-5674

creationtimestamp| type| source ---|---|--- 2025-06-06 01:42:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvpgahqr42s...

CVE-2025-5708

creationtimestamp| type| source ---|---|--- 2025-06-06 01:30:27+00:00| published-proof-of-concept| Telegram/Ky7-fAwyzxgpEw1yj-LKv6RLUuZgzm3K9CGTukUJcYN--I 2025-06-06 05:05:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw2qixmr62a...

CVE-2025-5698

creationtimestamp| type| source ---|---|--- 2025-06-06 01:07:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvnh2ifet2m...

CVE-2025-5697

creationtimestamp| type| source ---|---|--- 2025-06-06 00:52:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvmm6zl2v2s...

CVE-2025-5706

creationtimestamp| type| source ---|---|--- 2025-06-06 00:30:46+00:00| published-proof-of-concept| Telegram/Ye5u7iawGclqBMyVLRzmIkNrHeAFyk5kO9UgV2PswPRSwxs 2025-06-06 04:55:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw275ngpx2e...

openSUSE Security Advisory (SUSE-SU-2025:01809-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-49012

creationtimestamp| type| source ---|---|--- 2025-06-05 23:19:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114633314018963839 2025-06-06 02:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvt3bqjlp2r...

CVE-2025-5676

creationtimestamp| type| source ---|---|--- 2025-06-05 19:30:46+00:00| published-proof-of-concept| Telegram/UOEJDoYx6ECu1tx4T0MRkt2PWOQIAE2ELKDIjsXPX4f8Pg 2025-06-06 01:37:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvp5bzbqh2a...

CVE-2025-49009

creationtimestamp| type| source ---|---|--- 2025-06-05 19:19:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquzyjhxki2s...

CVE-2025-5671 TOTOLINK N302R Plus HTTP POST Request formPortFw buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK N302R Plus up to 3.4.0-B20201028. Affected is an unknown function of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument servicetype leads to buffer overflow. It is possib...

CVE-2025-0691

creationtimestamp| type| source ---|---|--- 2025-06-05 14:39:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqukdxealci2...

CVE-2025-5657

creationtimestamp| type| source ---|---|--- 2025-06-05 13:07:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquf57rx6iv2...

CVE-2025-5341

creationtimestamp| type| source ---|---|--- 2025-06-05 11:44:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquaisjij542 2025-06-05 14:56:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqulcxpcqd2s...

CVE-2025-4568

Improper neutralization of input provided by an unauthorized user into changesreferenceid parameter in URL allows for boolean-based Blind SQL Injection attacks...

CVE-2025-4568

CVE-2025-4568 affects 2ClickPortal. The vulnerability is a SQL Injection flaw in the changes__reference_id parameter, caused by improper neutralization of input, enabling boolean-based blind SQL injection. Affected: 2ClickPortal versions prior to 7.14.3. Remediation: upgrade to 7.14.3 or later (a...