CVE-2025-50861

creationtimestamp| type| source ---|---|--- 2025-08-14 23:27:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwfiieynbn2g 2026-07-06 06:49:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxirff4di2y...

CVE-2025-53587

creationtimestamp| type| source ---|---|--- 2025-08-14 21:51:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwfd655td62g...

CVE-2025-36124

creationtimestamp| type| source ---|---|--- 2025-08-14 21:15:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3lwfb47bvzl2a 2026-01-09 13:55:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbynk52otn26...

CVE-2025-25231

creationtimestamp| type| source ---|---|--- 2025-08-14 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwfafkt5jy2m 2025-08-30 15:48:47+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-25231.yaml 2025-08-31...

CVE-2025-45314

creationtimestamp| type| source ---|---|--- 2025-08-13 19:26:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwcklb2lvp2p...

CVE-2024-54678

creationtimestamp| type| source ---|---|--- 2025-08-12 14:58:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw7l5sbkey2z 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-03...

CVE-2025-55150

creationtimestamp| type| source ---|---|--- 2025-08-12 00:48:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw63morgrv2e 2026-04-10 21:03:09+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67usbgir2h...

CVE-2025-8831

creationtimestamp| type| source ---|---|--- 2025-08-11 06:06:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw44xiqc4t2d 2025-08-11 15:39:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002...

CVE-2025-8817

creationtimestamp| type| source ---|---|--- 2025-08-11 01:06:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw3m6emqvx26 2025-08-11 15:39:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002...

CVE-2025-8785

creationtimestamp| type| source ---|---|--- 2025-08-10 03:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvzemnbs3y2a...

CVE-2022-50233

creationtimestamp| type| source ---|---|--- 2025-08-09 17:46:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvyd46ruvv2q 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

Missing Authentication for Critical Function

Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the deduplicateCreatePost method. An attacker can access posts in private channels without proper...

Blogbook 注入漏洞

Blogbook is a content management system project by the individual developer Chaitak Gorai. Blogbook has an injection vulnerability that originates from SQL injection of the parameter editpostid in the file /admin/includes/editpost.php...

CVE-2022-0747

The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the postid parameter before using it in a SQL statement via the qcldupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...

CVE-2021-24932

The Auto Featured Image Auto Post Thumbnail WordPress plugin before 3.9.3 does not sanitise and escape the postid parameter before outputting back in an admin page within a JS block, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-36569

Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /users/delete/2...

CVE-2021-36570

Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /permissions/delete/2---...

PT-2025-15238 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the postID parameter in the edit method. Recommendations: For RUoYi version 4.8.0, consider disabling the edit method until a patch is...

CVE-2025-2164

The pixelstats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'postid' and 'sortby' parameters in all versions up to, and including, 0.8.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2024-13846

The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘postid’ parameter in all versions up to, and including, 3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...