CVE-2025-49652

creationtimestamp| type| source ---|---|--- 2025-06-09 19:48:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17742 2025-06-09 19:48:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr75iwximc2m...

CVE-2025-48123

creationtimestamp| type| source ---|---|--- 2025-06-09 18:43:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr6zugyhmf2p...

CVE-2025-27818

creationtimestamp| type| source ---|---|--- 2025-06-09 13:04:22+00:00| seen| https://seclists.org/oss-sec/2025/q2/236 2025-06-09 15:24:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lr6oqv6nhm2m 2025-06-10 08:32:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17840...

CVE-2025-5875

creationtimestamp| type| source ---|---|--- 2025-06-08 18:07:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114649073412244468 2025-06-09 12:01:36+00:00| seen| Telegram/bTJ9s6Dm5c98HBwnHhlVxkUI4b7kIVaieHQvre00jyC9A 2025-06-12 19:33:50+00:00| published-proof-of-concept|...

CVE-2025-30625

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Pramschufer AppBanners appbanners allows Stored XSS.This issue affects AppBanners: from n/a through = 1.5.14...

CVE-2025-49317

Cross-Site Request Forgery CSRF vulnerability in NTC WP Page Loading wp-page-loading allows Cross Site Request Forgery.This issue affects WP Page Loading: from n/a through = 1.0.6...

CVE-2025-24772

Cross-Site Request Forgery CSRF vulnerability in cmsMinds Pay with Contact Form 7 pay-with-contact-form-7 allows Cross Site Request Forgery.This issue affects Pay with Contact Form 7: from n/a through = 1.0.4...

CVE-2025-26691

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission...

CVE-2025-5855

creationtimestamp| type| source ---|---|--- 2025-06-08 09:35:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114647060242416753 2025-06-09 03:00:46+00:00| published-proof-of-concept| Telegram/IcrvFDR0isMABNY7xD8IZKGUH3hubjVbOLpxqZcAkUCPY1k 2025-06-09 03:03:43+00:00| seen|...

CVE-2025-31134

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, an attacker can gain additional information about the server by checking if certain directories exist. An attacker can, for example, check if older PHP versions are installed or if certain software is installed on the server...

CVE-2025-5794

creationtimestamp| type| source ---|---|--- 2025-06-06 19:42:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114638125652421315 2025-06-06 21:28:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxrnzcwb52o...

CVE-2025-5798

creationtimestamp| type| source ---|---|--- 2025-06-06 19:42:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114638125652421315 2025-06-06 21:13:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxqszwooh2a...

CVE-2025-49011

creationtimestamp| type| source ---|---|--- 2025-06-06 19:23:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxkoqhiry2e...

CVE-2025-5788

creationtimestamp| type| source ---|---|--- 2025-06-06 17:43:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114637654030045633 2025-06-06 19:28:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxkxp6dvd2e...

CVE-2020-5142

creationtimestamp| type| source ---|---|--- 2025-06-06 09:00:06+00:00| published-proof-of-concept| Telegram/RH2MhouTaF4rWCiSYSPiRSLidDsw7wvhKikMLDAOh-s2hI 2025-06-15 21:02:20+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lroeg4bp6t22...

CVE-2025-3365

creationtimestamp| type| source ---|---|--- 2025-06-06 08:31:44+00:00| published-proof-of-concept| Telegram/2lxciVIudPRU1JELYymAPWJO5amPkWTwS2YjpxrD9s2lxPw 2025-06-06 10:15:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635894258411433 2025-06-06 11:27:57+00:00| seen|...

CVE-2024-46941

The CVE-2024-46941 vulnerability concerns Vivo SystemUI, where an incorrect component protection setting permits access to specific information. The issue is described as a local-attackable misconfiguration with low to moderate impact on confidentiality (CVSS v4.0 base score 4.8; Privileges None,...

Mattermost Unauthorized Access Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an unauthorized access vulnerability that stems from improper cleaning of Google OAuth credentials, which can be exploited by an attacker to cause unauthorized access...

Meet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 3

Microsoft launched its Cybersecurity Governance Council in 2024, and with it, named a group of deputy chief information security officers that ensure comprehensive oversight of the company’s cybersecurity risk, defense, and compliance. These leaders work in tandem with product and engineering...

CVE-2025-27754

creationtimestamp| type| source ---|---|--- 2025-06-05 13:49:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquhlay4lxd2 2025-06-05 14:31:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114631238055243276...