CVE-2025-5806

Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...

CVE-2025-5806

CVE-2025-5806 affects Jenkins Gatling Plugin 136.vb_9009b_3d33a_e. The vulnerability arises from serving Gatling reports in a way that bypasses CSP protections added in Jenkins 1.641/1.625, enabling cross-site scripting (XSS) exploitable by users who can change report content. CVSSv3.1 base score...

CVE-2025-5729

creationtimestamp| type| source ---|---|--- 2025-06-06 10:58:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwoieqvhq2m...

CVE-2025-3321

creationtimestamp| type| source ---|---|--- 2025-06-06 10:15:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635894258411433 2025-06-06 10:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwnwc7ivx2m...

CVE-2025-5704

creationtimestamp| type| source ---|---|--- 2025-06-06 02:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvtn6rlpy2k...

CVE-2025-5708

A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /Admin/NewsReport.php. The manipulation of the argument txtFrom leads to sql injection. It is possible to initiate the attack remotely. The...

OSV-2025-442 Security exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422516687 Crash type: Security exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$8.process org.jsoup.parser.TreeBuilder.currentElement...

PT-2025-24276 · Jenkins · Jenkins Gatling Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Gatling Plugin version 136.vb 9009b 3d33a e Description: The issue allows users who can change report content to exploit a cross-site scripting XSS vulnerability due to the manner in which Gatling reports are served, bypassing the...

PT-2025-24033 · WordPress · Hive Support

Name of the Vulnerable Software and Affected Versions: Hive Support plugin for WordPress affected versions not specified Description: The issue concerns unauthorized access and modification of data due to a missing capability check. This allows for an authentication bypass, enabling unauthorized...

PT-2025-25510 · Git +1 · Jsoup

Name of the Vulnerable Software and Affected Versions: jsoup affected versions not specified Description: The software is susceptible to a security exception during HTML processing. The crash occurs within the org.jsoup.parser.HtmlTreeBuilder class, specifically during the process and...

PT-2025-24218 · Google +1 · Recaptcha +1

Name of the Vulnerable Software and Affected Versions: Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant versions n/a through 4.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This is a...

CVE-2021-24442

creationtimestamp| type| source ---|---|--- 2025-06-06 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-06 2025-06-07 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-07 2025-06-08 00:00:00+00:00| seen| The Shadowserver...

IBM DB2 DoS (7235069) (Windows)

According to it self-reported version number, IBM Db2 is affected by a remote code execution vulnerability as a database administrator of one database may execute code or read/write files from another database within the same instance. Note that Nessus has not tested for this issue but has instea...

CVE-2025-5694

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack ma...

CVE-2025-5694 PHPGurukul Human Metapneumovirus Testing Management System search-report-result.php sql injection

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack ma...

CVE-2025-5693

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection...

CVE-2025-5702

creationtimestamp| type| source ---|---|--- 2025-06-05 19:03:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114632309907329659 2025-06-06 01:22:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvocgjpu42e 2025-06-08 06:28:31+00:00| seen|...

CVE-2025-46258

creationtimestamp| type| source ---|---|--- 2025-06-05 18:54:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquylr3voa2r...

Ross Ulbricht Got a $31 Million Donation From a Dark Web Dealer, Crypto Tracers Suspect

Crypto-tracing firm Chainalysis says the mysterious 300-bitcoin donation to the pardoned Silk Road creator appears to have come from someone associated with a different defunct black market: AlphaBay...

CVE-2025-5739

creationtimestamp| type| source ---|---|--- 2025-06-05 18:37:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114632204189823445 2025-06-06 09:31:41+00:00| published-proof-of-concept| Telegram/mYiFhS0KI41FnuJb80DPaIeUDJlgHATfKqT73V-Gr4Yn1fQ 2025-06-06 10:18:09+00:00| seen|...