CVE-2025-8015 Shortcodes Ultimate <= 7.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title and Slide Link

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded image's 'Title' and 'Slide link' fields in all versions up to, and including, 7.4.2 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2025-54121

Starlette is a lightweight ASGI Asynchronous Server Gateway Interface framework/toolkit, designed for building async web services in Python. In versions 0.47.1 and below, when parsing a multi-part form with large files greater than the default max spool size starlette will block the main thread t...

CVE-2025-36845

An issue was discovered in Eveo URVE Web Manager 27.02.2025. The endpoint /internal/redirect.php allows for Server-Side Request Forgery SSRF. The endpoint takes a URL as input, sends a request to this address, and reflects the content in the response. This can be used to request endpoints only...

CVE-2025-54085

creationtimestamp| type| source ---|---|--- 2025-07-21 16:47:08+00:00| seen| https://bsky.app/profile/paulasadoorian.bsky.social/post/3luigwxbzua23 2025-07-31 00:40:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lv7vlfhensi2 2025-07-3...

CVE-2024-10031

creationtimestamp| type| source ---|---|--- 2025-07-21 07:07:46+00:00| seen| https://poliverso.org/objects/0477a01e-e25d1f2b-32702de2beb9d6c0...

RHEL 8 : python-setuptools (RHSA-2025:11426)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:11426 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

EulerOS 2.0 SP12 : openssh (EulerOS-SA-2025-1832)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent...

CVE-2025-46384

CWE-434 Unrestricted Upload of File with Dangerous Type...

CVE-2025-7880

creationtimestamp| type| source ---|---|--- 2025-07-20 12:45:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufiymbaes27 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:41+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7858

creationtimestamp| type| source ---|---|--- 2025-07-20 03:01:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lueicuxicd2t...

CVE-2025-7837

creationtimestamp| type| source ---|---|--- 2025-07-19 20:30:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludsixony32w...

CVE-2025-7395

creationtimestamp| type| source ---|---|--- 2025-07-19 03:00:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lubxtju2yl2j 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:42+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2026-01-...

CVE-2025-53901

creationtimestamp| type| source ---|---|--- 2025-07-18 19:21:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lub65eciki2j 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:43+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-49485

creationtimestamp| type| source ---|---|--- 2025-07-18 12:14:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luagd54w3l2i...

CVE-2025-7757

creationtimestamp| type| source ---|---|--- 2025-07-18 01:15:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu7biuxcva2o...

CVE-2025-7700

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...

CVE-2025-3753

A code execution vulnerability has been identified in the Robot Operating System ROS 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval function to process unsanitized, user-supplied input in the 'rosbag filter' command. This...

CVE-2024-41148

A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'hz' verb, which reports the publishing rate of a topic and accepts a user-provided Python...

CVE-2025-32812

creationtimestamp| type| source ---|---|--- 2025-07-17 18:35:22+00:00| seen| https://gist.github.com/airalien999/1b7dca5b6aaf83218850346361fe173a...

CVE-2025-53928

MaxKB has a Remote Command Execution vulnerability in the MCP call present in versions prior to 1.10.9-lts and 2.0.0. The issue is fixed in 1.10.9-lts and 2.0.0. No exploitation details are provided beyond this, and remediation is to upgrade to the fixed versions.