CVE-2025-4840

The inprosysmedia-likes-dislikes-post WordPress plugin (versions

CVE-2025-42988

creationtimestamp| type| source ---|---|--- 2025-06-10 03:36:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7xo75kej2s...

CVE-2025-47959

creationtimestamp| type| source ---|---|--- 2025-06-10 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-359/ 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-13 02:32:30+00:00| seen|...

CVE-2025-43574

creationtimestamp| type| source ---|---|--- 2025-06-10 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-338/ 2025-06-10 19:31:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17979 2025-06-12 22:25:49+00:00| seen|...

CVE-2025-42982

creationtimestamp| type| source ---|---|--- 2025-06-10 01:33:53+00:00| seen| Telegram/VjI6o5iinQgIrx0kweQ6vZ4ijUEDsimPFeQ2gUe4Yzczac 2025-06-10 03:31:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7xfanaiq23 2025-06-10 04:44:33+00:00| seen|...

CVE-2025-42994

creationtimestamp| type| source ---|---|--- 2025-06-10 01:33:53+00:00| seen| Telegram/VjI6o5iinQgIrx0kweQ6vZ4ijUEDsimPFeQ2gUe4Yzczac 2025-06-10 03:17:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7wlicz7o2c...

CVE-2025-42991

SAP S/4HANA Bank Account Application does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the...

CVE-2025-42982

SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. This causes high impact on confidentiality, integrity and availability of the application...

CVE-2025-42988 Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no...

CVE-2025-42983 Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any...

CVE-2025-0036

The CVE concerns AMD Versal Adaptive SoC devices where the Secure Stream Switch (SSS) configuration is not cleared after a cryptographic operation in the Platform Loader and Manager (PLM) during post-boot runtime. This improper SSS setup can lead to data being written to or read from invalid memo...

CVE-2025-0037

The CVE-2025-0037 issue affects AMD Versal Adaptive SoC devices, arising from lack of address validation when PLM runtime services are executed via the PLM firmware. This could allow a remote processor to access isolated or protected memory spaces, compromising confidentiality and integrity (impa...

CVE-2025-5901

creationtimestamp| type| source ---|---|--- 2025-06-09 23:32:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17809 2025-06-10 01:23:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7qaabs7k2m...

CVE-2025-5903 TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the...

CVE-2025-5902

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument slaveIpList leads to buffer overflow. The attack may be initiate...

CVE-2025-26468

CyberData 011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition or system disruption...

CVE-2025-5900

creationtimestamp| type| source ---|---|--- 2025-06-09 22:32:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17804 2025-06-09 23:21:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7jeumhh32m...

CVE-2025-49139

creationtimestamp| type| source ---|---|--- 2025-06-09 21:31:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17783 2025-06-09 23:23:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7jjqz7562e...

CVE-2025-5918

creationtimestamp| type| source ---|---|--- 2025-06-09 20:31:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17764 2025-06-09 23:14:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7iyfsyb22m 2025-08-18 17:38:39+00:00| seen|...

CVE-2025-49136 listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Starting in version 4.0.0 and prior to version 5.0.2, the env and expandenv template functions which is enabled by default in Sprig enables capturing of env variables on host. While this may not be a problem on single-use...