CVE-2025-5573

creationtimestamp| type| source ---|---|--- 2025-06-04 07:23:54+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqrbimhqv7h2...

CVE-2025-5482 Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation

The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.11. This is due to the plugin not properly validating a user-supplied key. This makes it possible for...

CVE-2025-5539

creationtimestamp| type| source ---|---|--- 2025-06-04 07:15:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrb47rzrz2e...

CVE-2025-4580 File Provider <= 1.2.3 - Item Deletion via CSRF

The File Provider WordPress plugin through 1.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2025-20994

Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write arbitrary files...

CVE-2025-20993

The CVE-2025-20993 entry concerns libsecimaging.camera.samsung.so with an out-of-bounds write, enabling local attackers to write memory past bounds. Affected: libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1. Root cause described as an out-of-bounds write; impact is local memory ma...

CVE-2025-20992

Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory...

CVE-2025-20984

Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch...

CVE-2025-5557 PHPGurukul Teacher Subject Allocation Management System edit-course.php sql injection

A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-course.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotel...

CVE-2025-5549

creationtimestamp| type| source ---|---|--- 2025-06-04 01:23:54+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqqn7sdsk2w2 2025-06-04 01:31:30+00:00| published-proof-of-concept| Telegram/zUVTgXvzkwLEqz2FR1DEMSQdpoQl8zaI1Yp9yK0vMGoKWE...

CVE-2025-49000

creationtimestamp| type| source ---|---|--- 2025-06-04 00:56:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqqlwkt7oe2r...

CVE-2025-5547

creationtimestamp| type| source ---|---|--- 2025-06-04 00:30:17+00:00| published-proof-of-concept| Telegram/p21E4CuUCeNoo1Q5zMvHMTRKpdsC1uH2Jv5gkJnfkynA4 2025-06-04 01:23:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqqnb5msgn52...

CVE-2025-23101

CVE-2025-23101 affects Samsung Mobile Processor Exynos 1380. The issue is a Use-After-Free in the processor that leads to privilege escalation. CVSSv3.1 indicates network attack vector, low attack complexity, and no user interaction, with privileges required: none, scope unchanged, and impact: co...

SUSE: Security Advisory (SUSE-SU-2025:1331-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-25032

creationtimestamp| type| source ---|---|--- 2025-06-03 21:02:15+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqq6swkdii22...

CVE-2025-48950

MaxKB (open-source AI assistant) prior to version 1.10.8-lts is affected by a sandbox bypass in the Python function library: the sandbox only enforces execution permissions for binaries in common directories (e.g., /bin, /usr/bin), allowing attackers to exploit files with execution permission in ...

CVE-2025-25022

creationtimestamp| type| source ---|---|--- 2025-06-03 16:37:19+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqppuxp5qia2 2025-06-03 17:23:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpslba27v2m 2025-06-05...

CVE-2025-5503

creationtimestamp| type| source ---|---|--- 2025-06-03 15:45:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpn2m26qly2 2025-06-03 17:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqprzdvnzz2q...

CVE-2025-25019 IBM QRadar Suite Software and IBM Cloud Pak for Security session fixation

IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not invalidate session after a logout which could allow a user to impersonate another user on the system...

CVE-2024-45655 IBM Application Gateway incorrect permission assignment

IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment...