CVE-2025-57130

An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user,...

CVE-2025-57130

An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user,...

CVE-2025-41343

creationtimestamp| type| source ---|---|--- 2025-11-04 14:45:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4srkpaboz2j 2025-11-04 15:35:52+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4suesf6oox2...

CVE-2025-20734

creationtimestamp| type| source ---|---|--- 2025-11-04 08:45:26+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4s5gzdxtby2 2025-11-04 09:34:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4sa6rpouw2s...

CVE-2025-50363

creationtimestamp| type| source ---|---|--- 2025-11-01 19:30:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/57882 2025-11-02 03:00:06+00:00| published-proof-of-concept| Telegram/OZ23IKbQ47oGvBTE7eizQgpIhDfJ5XALPOlUhm63kbbFXAA 2025-11-03 20:05:49+00:00| seen|...

CVE-2025-64349

CVE-2025-64349 affects ELOG (the Electronic Logbook) with an authentication-level flaw: an authenticated, low-privilege user can modify another user’s profile, potentially changing the target’s email address and triggering a password reset to take over the account. Public records note ELOG defaul...

CVE-2025-6520

creationtimestamp| type| source ---|---|--- 2025-10-31 09:01:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4i4ibnhwg2l 2025-10-31 09:26:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4i5vtt2zh2k 2025-10-31 12:56:27+00:00| seen|...

ELog 安全漏洞

ELog is an electronic logging software with a web interface by the individual developer Stefan Ritt. A security vulnerability exists in ELog that originates from an authenticated user being able to modify other users' profiles, potentially leading to an account takeover...

CVE-2025-53880

creationtimestamp| type| source ---|---|--- 2025-10-30 12:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4fxo635ny2k 2025-10-30 13:55:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115463457550983176...

CVE-2025-64095

creationtimestamp| type| source ---|---|--- 2025-10-29 00:01:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4c5etmxnu22 2025-10-29 00:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4c5isapkw2u 2025-10-31 04:18:20+00:00| seen|...

WordPress plugin Social Feed Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

GHSA-27C9-VP3W-6WW8 Shopware exposes sensitive user information via CSV export mapping

Impact Malicious actors can exploit this finding to export sensitive customer information from a Shopware application, including password hashes and password reset tokens. In SaaS deployments, this primarily affects customer accounts. In on-premise deployments, however, it also includes the hashe...

Shopware exposes sensitive user information via CSV export mapping

Impact Malicious actors can exploit this finding to export sensitive customer information from a Shopware application, including password hashes and password reset tokens. In SaaS deployments, this primarily affects customer accounts. In on-premise deployments, however, it also includes the hashe...

CVE-2025-62518

creationtimestamp| type| source ---|---|--- 2025-10-21 14:28:10+00:00| published-proof-of-concept| https://github.com/astral-sh/tokio-tar/security/advisories/GHSA-j5gw-2vrg-8fgx 2025-10-21 15:18:29+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3m3pmuuj7k6y2...

Reolink desktop application 安全漏洞

Reolink desktop application is a security camera monitoring software from Reolink USA. A security vulnerability exists in the Reolink desktop application that stems from the use of hard-coded and predictable AES encryption keys to encrypt user profiles, which could lead to a local attacker...

CERTFR-2025-ACT-045

creationtimestamp| type| source ---|---|--- 2025-10-20 13:10:36+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m3mvbm2aoq2y 2025-10-20 13:10:38+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115406656997632462 2025-10-20 14:55:15+00:00| seen|...

CVE-2025-41028

creationtimestamp| type| source ---|---|--- 2025-10-20 10:34:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3mmlaqhmv2s 2025-10-20 11:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3mpxlghz52h...

Broken Access Control

Indico is vulnerable to Broken Access Control. the vulnerability is due to improper authorization logic that fails to verify the caller's privileges, allowing attackers to invoke the API and obtain profile details of other users without admin permissions...

CVE-2025-34253

D-Link Nuclias Connect firmware versions

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in the F5 BIG-IP that originates when configuring security policies and server-side HTTP/2 profiles, where...