BreachLock Named Representative Provider for Penetration Testing as a Service (PTaaS) in New Gartner® Report

New York, United States, 15th October 2025, CyberNewsWire...

CVE-2025-61974

creationtimestamp| type| source ---|---|--- 2025-10-15 15:31:29+00:00| seen| https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f 2025-10-16 09:05:24+00:00| seen| https://circl.lu/pub/tr-96/ 2025-10-17 13:38:40+00:00| seen|...

CVE-2025-39977

creationtimestamp| type| source ---|---|--- 2025-10-15 09:09:15+00:00| seen| https://gist.github.com/Darkcrai86/31c5f5d1745c6217f5fc95fc4f302f8a 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-10310

The WordPress plugin Rich Snippet Site Report (Rich Snippet Site Report) is affected by CVE-2025-10310: SQL Injection via the last parameter in versions up to and including 2.0.0105. The issue arises from insufficient escaping of user-supplied input and inadequate preparation of the SQL query, en...

EUVD-2025-34567

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

CVE-2025-10310 Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

CVE-2025-10310 Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

CVE-2025-39993 media: rc: fix races with imon_disconnect()

In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imondisconnect Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free in createpipe include/linux/usb.h:1945 inline BUG: KASAN: use-after-free in sendpacket+0xa2d/0xbc0...

WordPress Rich Snippet Site Report plugin <= 2.0.0105 - Authenticated (Admin+) SQL Injection vulnerability

Authenticated Admin+ SQL Injection vulnerability discovered by johska in WordPress Theme Rich Snippet Site Report versions = 2.0.0105...

PT-2025-42296

Name of the Vulnerable Software and Affected Versions Rich Snippet Site Report plugin for WordPress versions prior to 2.0.0106 Description The Rich Snippet Site Report plugin for WordPress is susceptible to SQL Injection due to inadequate input sanitization and SQL query preparation. Specifically...

CVE-2025-10310: Improper Neutralization of Special Elements used in an SQL Command

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

CVE-2025-62365

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in reportthis function in librenms/includes/functions.php. The reportthis function had improper filtering htmlentities function was incorrectly use in a href environment, which...

Lenovo Universal Device Client (UDC) Vulnerability - Lenovo Support US

No description provided...

JetBrains YouTrack XSS

The vulnerability of the Code Inspection Report Tab component in the JetBrains YouTrack project and task management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

Linux Distros Unpatched Vulnerability : CVE-2025-39664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient escaping in the report scheduler within Checkmk 2.4.0p13, 2.3.0p38, 2.2.0p46 and 2.1.0 EOL allows authenticated attackers to define the storage...

LibreNMS is vulnerable to Reflected-XSS in `report_this` function

Summary Reflected-XSS in reportthis function in librenms/includes/functions.php Details Recently, it was discovered that the reportthis function had improper filtering htmlentities function was incorrectly used in a href environment, which caused the projectissues parameter to trigger an XSS...

CVE-2025-62365 LibreNMS vulnerable to Reflected-XSS in `report_this` function

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in reportthis function in librenms/includes/functions.php. The reportthis function had improper filtering htmlentities function was incorrectly use in a href environment, which...

EUVD-2025-34114

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in reportthis function in librenms/includes/functions.php. The reportthis function had improper filtering htmlentities function was incorrectly use in a href environment, which...

CVE-2025-62365

CVE-2025-62365 affects LibreNMS (LibreNMS/librenms) prior to version 25.7.0. The vulnerability is a reflected XSS in the function report_this (librenms/includes/functions.php) caused by improper filtering of user input, specifically the incorrect use of htmlentities in a href context, which allow...

CVE-2025-62365 LibreNMS vulnerable to Reflected-XSS in `report_this` function

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in reportthis function in librenms/includes/functions.php. The reportthis function had improper filtering htmlentities function was incorrectly use in a href environment, which...