PT-2025-50744

Name of the Vulnerable Software and Affected Versions Xhibiter NFT Marketplace version 1.10.2 Description The Xhibiter NFT Marketplace software has a SQL injection issue in the collections endpoint. An attacker can manipulate database queries by using the id parameter. Boolean-based, time-based,...

PT-2025-50637

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 5.8.4 Description Certain constant-time implementations within wolfSSL may be altered by LLVM optimizations into non-constant-time binaries. This transformation can introduce observable timing discrepancies, potential...

WordPress plugin List category posts SQL注入漏洞

WordPress List category posts is a feature-rich WordPress plugin , mainly through the catlist short code to achieve the function . WordPress List category posts has a SQL injection vulnerability, the vulnerability stems from the existence of the startingwith parameter time-based SQL injection, an...

Purei CMS SQL注入漏洞

Purei CMS is a content management system from the Dutch company Purei. A SQL injection vulnerability exists in Purei CMS version 1.0, which originates from a blind time-based SQL injection of unfiltered user input parameters, which could lead to the disclosure or tampering of database information...

CVE-2025-67648 Shopware's inproper input validation can lead to Reflected XSS through Storefront Login Page

Shopware is an open commerce platform. Versions 6.4.6.0 through 6.6.10.9 and 6.7.0.0 through 6.7.5.0 have a Reflected XSS vulnerability in AuthController.php. A request parameter from the login page URL is directly rendered within the Twig template of the Storefront login page without further...

CVE-2025-65290

creationtimestamp| type| source ---|---|--- 2025-12-10 23:15:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7o6txccqc2r...

CVE-2025-65950

WBCE CMS is vulnerable in versions 1.6.4 and earlier due to improper handling of the groups[] parameter in admin/users/save.php, enabling a low-privileged authenticated user to execute arbitrary SQL queries and potentially escalate to full database compromise with data exfiltration. The issue is ...

CVE-2025-65950 WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] Parameter

WBCE CMS is a content management system. In versions 1.6.4 and below, the user management module allows a low-privileged authenticated user with permissions to modify users to execute arbitrary SQL queries. This can be escalated to a full database compromise, data exfiltration, effectively...

CVE-2025-65950 WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] Parameter

WBCE CMS is a content management system. In versions 1.6.4 and below, the user management module allows a low-privileged authenticated user with permissions to modify users to execute arbitrary SQL queries. This can be escalated to a full database compromise, data exfiltration, effectively...

CVE-2025-65950 WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] Parameter

WBCE CMS is a content management system. In versions 1.6.4 and below, the user management module allows a low-privileged authenticated user with permissions to modify users to execute arbitrary SQL queries. This can be escalated to a full database compromise, data exfiltration, effectively...

CVE-2025-64545

creationtimestamp| type| source ---|---|--- 2025-12-10 19:59:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ntwi6ey42m...

CVE-2025-13152

creationtimestamp| type| source ---|---|--- 2025-12-10 15:32:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ney2vbsi2q 2025-12-10 16:34:11+00:00| seen| https://gist.github.com/Darkcrai86/89bf68f75b2c74560442450d2618d2b6 2025-12-10 17:37:40+00:00| seen|...

CVE-2025-14327

creationtimestamp| type| source ---|---|--- 2025-12-10 13:40:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7n6poeiyu2p 2025-12-11 15:25:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7puzz3ea222 2026-01-13 15:07:45+00:00| seen|...

RHSA-2025:22997 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

RHSA-2025:22995 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

RHSA-2025:22914 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

sctp: Prevent TOCTOU out-of-bounds write

...

Malicious Package

Overview real-time-tweet-streamer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in real-time-tweet-streamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692b2a444eb479ec815e98413b99cd6cb677cf8be77edef431d8acf9d6c9e5c5 The package real-time-tweet-streamer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192422 Malicious code in real-time-tweet-streamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692b2a444eb479ec815e98413b99cd6cb677cf8be77edef431d8acf9d6c9e5c5 The package real-time-tweet-streamer was found to contain malicious code. Source: ghsa-malware...