CVE-2025-64473

creationtimestamp| type| source ---|---|--- 2025-11-06 06:45:50+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4wxo4d7gqd2 2025-11-06 07:47:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4x35jpwfy2n...

CVE-2025-55278

creationtimestamp| type| source ---|---|--- 2025-11-06 00:27:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4wckpotma2s 2025-11-06 01:35:32+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4wge2vr2l42...

CVE-2025-64455

creationtimestamp| type| source ---|---|--- 2025-11-05 06:20:46+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4ufsyqlzgv2 2025-11-05 07:01:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ui4rr4622n...

CVE-2025-57130

An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user,...

CVE-2025-57130

An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user,...

CVE-2025-41343

creationtimestamp| type| source ---|---|--- 2025-11-04 14:45:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4srkpaboz2j 2025-11-04 15:35:52+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4suesf6oox2...

CVE-2025-20734

creationtimestamp| type| source ---|---|--- 2025-11-04 08:45:26+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4s5gzdxtby2 2025-11-04 09:34:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4sa6rpouw2s...

CVE-2025-50363

creationtimestamp| type| source ---|---|--- 2025-11-01 19:30:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/57882 2025-11-02 03:00:06+00:00| published-proof-of-concept| Telegram/OZ23IKbQ47oGvBTE7eizQgpIhDfJ5XALPOlUhm63kbbFXAA 2025-11-03 20:05:49+00:00| seen|...

CVE-2025-64349

CVE-2025-64349 affects ELOG (the Electronic Logbook) with an authentication-level flaw: an authenticated, low-privilege user can modify another user’s profile, potentially changing the target’s email address and triggering a password reset to take over the account. Public records note ELOG defaul...

CVE-2025-6520

creationtimestamp| type| source ---|---|--- 2025-10-31 09:01:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4i4ibnhwg2l 2025-10-31 09:26:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4i5vtt2zh2k 2025-10-31 12:56:27+00:00| seen|...

ELog 安全漏洞

ELog is an electronic logging software with a web interface by the individual developer Stefan Ritt. A security vulnerability exists in ELog that originates from an authenticated user being able to modify other users' profiles, potentially leading to an account takeover...

CVE-2025-53880

creationtimestamp| type| source ---|---|--- 2025-10-30 12:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4fxo635ny2k 2025-10-30 13:55:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115463457550983176...

CVE-2025-64095

creationtimestamp| type| source ---|---|--- 2025-10-29 00:01:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4c5etmxnu22 2025-10-29 00:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4c5isapkw2u 2025-10-31 04:18:20+00:00| seen|...

WordPress plugin Social Feed Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

Shopware exposes sensitive user information via CSV export mapping

Impact Malicious actors can exploit this finding to export sensitive customer information from a Shopware application, including password hashes and password reset tokens. In SaaS deployments, this primarily affects customer accounts. In on-premise deployments, however, it also includes the hashe...

GHSA-27C9-VP3W-6WW8 Shopware exposes sensitive user information via CSV export mapping

Impact Malicious actors can exploit this finding to export sensitive customer information from a Shopware application, including password hashes and password reset tokens. In SaaS deployments, this primarily affects customer accounts. In on-premise deployments, however, it also includes the hashe...

CVE-2025-62518

creationtimestamp| type| source ---|---|--- 2025-10-21 14:28:10+00:00| published-proof-of-concept| https://github.com/astral-sh/tokio-tar/security/advisories/GHSA-j5gw-2vrg-8fgx 2025-10-21 15:18:29+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3m3pmuuj7k6y2...

PT-2025-45650

Impact Malicious actors can exploit this finding to export sensitive customer information from a Shopware application, including password hashes and password reset tokens. In SaaS deployments, this primarily affects customer accounts. In on-premise deployments, however, it also includes the hashe...

Reolink desktop application 安全漏洞

Reolink desktop application is a security camera monitoring software from Reolink USA. A security vulnerability exists in the Reolink desktop application that stems from the use of hard-coded and predictable AES encryption keys to encrypt user profiles, which could lead to a local attacker...

CERTFR-2025-ACT-045

creationtimestamp| type| source ---|---|--- 2025-10-20 13:10:36+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m3mvbm2aoq2y 2025-10-20 13:10:38+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115406656997632462 2025-10-20 14:55:15+00:00| seen|...