CVE-2025-53255 WordPress HurryTimer plugin <= 2.13.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Nabil Lemsieh HurryTimer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HurryTimer: from n/a through 2.13.1...

CVE-2015-0849

creationtimestamp| type| source ---|---|--- 2025-06-27 01:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskha3tfzx2v...

CVE-2025-6750

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. Affected by this issue is the function H5Omtimenewencode of the file src/H5Omtime.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the...

openSUSE 15 Security Update : kubernetes1.24 (SUSE-SU-2025:01941-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01941-1 advisory. - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content bsc1241865. Tenable has extracted the preceding descriptio...

CVE-2025-52992

The Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build fails. This may allow arbitrary processes to modify the content of a store outside of the build sandbox. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and...

CVE-2025-6707

Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior ...

CVE-2025-6212

creationtimestamp| type| source ---|---|--- 2025-06-26 09:50:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19583 2025-06-26 12:34:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj56eibgv2r...

CVE-2025-41404

creationtimestamp| type| source ---|---|--- 2025-06-26 06:51:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19580 2025-06-26 10:55:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsixnvp54g2r...

CVE-2025-2938

Removed by vendor...

CVE-2025-5315

Removed by vendor...

CVE-2025-45333

berkeley-abc abc 1.1 contains a Null Pointer Dereference NPD vulnerability in the AbcNtkCecFraigPart function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes...

CVE-2025-52999

jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly...

CVE-2025-6503

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /phpaction/fetchSelectedCategories.php. The manipulation of the argument categoriesId leads to sql injection. The attack may be initiated...

CVE-2025-5351

A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additiona...

CVE-2025-4378

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19376 2025-06-24 20:34:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsex2vgzmz2k...

CVE-2025-4383 Authentication Bypass in Art-In Systems' Wi-Fi Cloud Hotspot

Improper Restriction of Excessive Authentication Attempts vulnerability in Art-in Bilişim Teknolojileri ve Yazılım Hizm. Tic. Ltd. Şti. Wi-Fi Cloud Hotspot allows Authentication Abuse, Authentication Bypass. This issue affects Wi-Fi Cloud Hotspot: before 30.05.2025...

CVE-2025-39201

creationtimestamp| type| source ---|---|--- 2025-06-24 13:50:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19330 2025-07-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-02 2025-10-16 10:00:00+00:00| seen|...

CVE-2025-52566

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's tokenizer implementation llamavocab::tokenize src/llama-vocab.cpp:3036 resulting in unintended behavior in tokens copying size comparison. Allowing...

CVE-2025-6536

A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tmtodatetime in the library src/lib/core/datetime.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been...

CVE-2025-6498

A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/alloc.c. The manipulation leads to memory leak. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be...