openSUSE Security Advisory (SUSE-SU-2025:01990-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:02013-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-6285

creationtimestamp| type| source ---|---|--- 2025-06-19 23:40:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18891 2025-06-19 23:48:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryplfzks62s...

CVE-2025-6284

creationtimestamp| type| source ---|---|--- 2025-06-19 22:40:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18886 2025-06-20 00:23:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryriyh5ws2o...

CVE-2025-6280

creationtimestamp| type| source ---|---|--- 2025-06-19 21:44:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18883 2025-06-20 00:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryrrwwdmq2a 2026-07-22 05:00:05+00:00| seen|...

GHSA-QPJ9-QCWX-8JV2

creationtimestamp| type| source ---|---|--- 2025-06-19 21:44:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18881...

CVE-2025-6278

creationtimestamp| type| source ---|---|--- 2025-06-19 20:44:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18879 2025-06-20 00:18:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryr7zzacn2a...

CVE-2025-6272

creationtimestamp| type| source ---|---|--- 2025-06-19 18:41:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18876 2025-06-19 20:03:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrycyo5rsi2s...

CVE-2025-6273

creationtimestamp| type| source ---|---|--- 2025-06-19 18:41:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18875 2025-06-19 20:23:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrye4hvukr23...

CVE-2025-33117

creationtimestamp| type| source ---|---|--- 2025-06-19 17:40:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18872 2025-06-19 18:02:29+00:00| seen| Telegram/mV5RUt-ErcEv8IWl-QMPKS-gDP3S7xJltTWYiLhYR65BNak 2025-06-19 20:08:30+00:00| seen|...

CVE-2025-50200

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which...

WordPress UpStream: a Project Management Plugin for WordPress plugin <= 2.1.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin UpStream: a Project Management Plugin for WordPress versions = 2.1.1...

WordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by Anhchangmutrang in WordPress Plugin PowerPress Podcasting versions = 11.13.11...

WordPress Esselink.nu Settings plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Esselink.nu Settings versions = 3.6...

CVE-2025-6268

creationtimestamp| type| source ---|---|--- 2025-06-19 15:41:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18867 2025-06-19 17:58:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lry3zlkhup2q...

CVE-2025-52464

creationtimestamp| type| source ---|---|--- 2025-06-19 15:41:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18865 2025-06-19 16:01:02+00:00| published-proof-of-concept| Telegram/ghFeQqn7WsKg2yNt1HKTrHYsC0dY2gPgdqVTKv1dpIc73do 2025-06-19 16:36:34+00:00| seen|...

GHSA-GQ7V-JR8C-MFR7

creationtimestamp| type| source ---|---|--- 2025-06-19 15:41:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18865 2025-06-19 16:01:02+00:00| published-proof-of-concept| Telegram/ghFeQqn7WsKg2yNt1HKTrHYsC0dY2gPgdqVTKv1dpIc73do 2025-06-19 16:36:34+00:00| seen|...

CVE-2025-49014

jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function fstrflocaltime of /src/builtin.c. This issue has been patched in commit 499c91b, no known fix version exists at time of publication...

CVE-2025-49763

ESI plugin does not have the limit for maximum inclusion depth, and that allows excessive memory consumption if malicious instructions are inserted. Users can use a new setting for the plugin --max-inclusion-depth to limit it. This issue affects Apache Traffic Server: from 10.0.0 through 10.0.5,...

CVE-2025-5234

creationtimestamp| type| source ---|---|--- 2025-06-19 09:43:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18843 2025-06-19 13:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrxo263ccw2p...