WordPress PeproDev Ultimate Profile Solutions 1.9.1-7.5.2 plugin - Authentication Bypass to Account Takeover

Authentication Bypass to Account Takeover vulnerability discovered by kr0d in WordPress Plugin PeproDev Ultimate Profile Solutions versions 1.9.1-7.5.2...

CVE-2025-47417

creationtimestamp| type| source ---|---|--- 2025-05-06 20:21:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15217 2025-05-06 22:27:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojwiohyb622 2025-05-07 00:31:32+00:00| seen| https://t.me/cvedetector/24655...

CVE-2025-4388

creationtimestamp| type| source ---|---|--- 2025-05-06 18:21:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15172 2025-05-06 19:20:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lojlqjrsoyp2 2025-05-06 22:26:58+00:00| seen|...

CVE-2025-12777

creationtimestamp| type| source ---|---|--- 2025-05-06 14:49:58+00:00| seen| https://gist.github.com/chrispatrick/ef9adba1d09172543266af24c83130a8...

CVE-2018-1359

creationtimestamp| type| source ---|---|--- 2025-05-06 13:21:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15115 2025-05-06 14:21:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loj3enxcj222 2025-05-06 16:09:26+00:00| seen| https://t.me/cvedetector/24603...

CVE-2025-4356

creationtimestamp| type| source ---|---|--- 2025-05-06 13:21:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15108 2025-05-06 14:41:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loj4ifuvpm2p 2025-05-06 18:39:52+00:00| exploited|...

CVE-2025-21467

creationtimestamp| type| source ---|---|--- 2025-05-06 10:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loinx5b4xb22 2025-05-06 12:48:36+00:00| seen| https://t.me/cvedetector/24583...

CVE-2025-21475

creationtimestamp| type| source ---|---|--- 2025-05-06 10:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loinx5ef7n2n 2025-05-06 12:48:25+00:00| seen| https://t.me/cvedetector/24576 2025-05-06 13:21:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15114...

CVE-2025-4345

creationtimestamp| type| source ---|---|--- 2025-05-06 10:21:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15081 2025-05-06 10:36:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiorxu4rb2e 2025-05-06 14:29:06+00:00| seen|...

CVE-2025-46816

creationtimestamp| type| source ---|---|--- 2025-05-06 10:14:14+00:00| published-proof-of-concept| https://github.com/patrickhener/goshs/security/advisories/GHSA-rwj2-w85g-5cmm 2025-05-06 19:19:59+00:00| seen|...

CVE-2024-49845

Memory corruption during the FRS UDS generation process...

CVE-2024-45578

Memory corruption while acquire and update IOCTLs during IFE output resource ID validation...

CVE-2024-45568

Memory corruption due to improper bounds check while command handling in camera-kernel driver...

CVE-2025-21459

CVE-2025-21459 affects Qualcomm WLAN components on Qualcomm-based devices. The issue is described as a transient denial-of-service that occurs while parsing per-STA (station) configuration/profile data in the ML IE/WLAN stack. Root cause details are not provided in the supplied documents beyond t...

CVE-2024-45577 Improper Input Validation in Camera Driver

Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information...

CVE-2024-45577

The CVE-2024-45577 entry concerns memory corruption in Qualcomm camera kernel driver triggered by user-space IOCTL calls to dump request information. Affected component: camera kernel driver in Qualcomm chipsets (unspecified models in the documents). Root cause: improper handling of IOCTL request...

CVE-2024-45554 Use After Free in DSP Service

Memory corruption during concurrent SSR execution due to race condition on the global maps list...

CVE-2025-3281 User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.1 via the createstripesubscription function, due to missing validation on the 'memberid' use...

CVE-2025-46590

Bypass vulnerability in the network search instruction authentication module Impact: Successful exploitation of this vulnerability can bypass authentication and enable access to some network search functions...

CVE-2025-46584

CVE-2025-46584 relates to Huawei HarmonyOS and describes an improper authentication logic implementation in the file system module. The issue is locally exploitable (attack vector: LOCAL) with low authentication complexity and LOW privileges required; confidentiality is affected (CVE/metrics show...