CVE-2025-47438

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through = 2.3.1...

CVE-2025-5136

creationtimestamp| type| source ---|---|--- 2025-05-24 23:45:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17499 2025-05-24 23:58:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpxdy2lu7m22 2025-05-25...

CVE-2025-5130

creationtimestamp| type| source ---|---|--- 2025-05-24 20:36:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpwypwbzlx72 2025-05-24 20:46:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17495 2025-05-24...

CVE-2025-5058

creationtimestamp| type| source ---|---|--- 2025-05-24 04:00:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpvazbswalb2 2025-05-24 06:55:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpvktqi4ol2w 2025-05-27...

CVE-2025-48753

In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock...

CVE-2025-48755

creationtimestamp| type| source ---|---|--- 2025-05-24 02:54:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpv5dkqe7742 2025-05-24 03:52:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17478...

CVE-2025-48756

In groupnumber in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits e.g., 5 bits for group number...

Laravel Framework Detection (Linux/Unix SSH Login)

SSH login-based detection of Laravel Framework. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-48064

GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...

CVE-2025-48378

creationtimestamp| type| source ---|---|--- 2025-05-23 15:44:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17409 2025-05-23 17:46:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpu6qyfysd2m 2025-05-23 23:29:58+00:00| seen|...

CVE-2025-47575

creationtimestamp| type| source ---|---|--- 2025-05-23 14:53:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptv2sigsg2q...

CVE-2025-3580

A flaw was found in Grafana. An improper access control issue at the /api/org/users/ API endpoint allows an Organization administrator to permanently delete a Server administrator account, leading to a complete loss of administrative control...

CVE-2025-39503

Deserialization of Untrusted Data vulnerability in GoodLayers Goodlayers Hotel gdlr-hotel allows Object Injection.This issue affects Goodlayers Hotel: from n/a through = 3.1.4...

CVE-2025-31423 WordPress Umberto <= 1.2.8 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in AncoraThemes Umberto allows Object Injection. This issue affects Umberto: from n/a through 1.2.8...

CVE-2025-32294 WordPress Oxpitan theme <= 1.3.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in gavias Oxpitan oxpitan allows PHP Local File Inclusion.This issue affects Oxpitan: from n/a through = 1.3.5...

CVE-2025-39495 WordPress Avantage Theme <= 2.4.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in BoldThemes Avantage avantage allows Object Injection.This issue affects Avantage: from n/a through = 2.4.9...

CVE-2025-39500

CVE-2025-39500 — Goodlayers Hostel (

CVE-2025-47558

MapSVG (WordPress plugin) is affected by CVE-2025-47558: a Missing Authorization vulnerability in MapSVG versions up to and including 8.6.12 allows accessing functionality not constrained by ACLs. The issue is caused by broken access control and could enable unauthorized access to certain feature...

CVE-2025-48289 WordPress Kids Planet <= 2.2.14 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet allows Object Injection. This issue affects Kids Planet: from n/a through 2.2.14...

CVE-2025-23917

Missing Authorization vulnerability in Chandrika Guntur, Morgan Kay Chamber Dashboard Business Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chamber Dashboard Business Directory: from n/a through 3.3.8...