GHSA-744G-7QM9-HJH9 The TYPO3 CMS Backend has Broken Authentication in Backend MFA

Problem The multifactor authentication MFA dialog presented during backend login can be bypassed due to insufficient enforcement of access restrictions on all backend routes. Successful exploitation requires valid backend user credentials, as MFA can only be bypassed after successful...

CVE-2025-22157

CVE-2025-22157 is a Privilege Escalation affecting Atlassian Jira Core Data Center and Server (versions 9.12.0, 10.3.0, 10.4.0, 10.5.0) and Jira Service Management Data Center and Server (versions 5.12.0, 10.3.0, 10.4.0, 10.5.0). The flaw allows an attacker to act as a higher-privileged user (CVS...

CVE-2025-37981

creationtimestamp| type| source ---|---|--- 2025-05-20 17:45:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17035 2025-05-20 20:09:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114541968902367001...

GHSA-JQQ5-WC57-F8HJ

creationtimestamp| type| source ---|---|--- 2025-05-20 17:43:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17025 2025-05-20 17:50:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114541423678244181...

CVE-2025-37922

creationtimestamp| type| source ---|---|--- 2025-05-20 16:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lpmjno7sdf2m...

PT-2025-22286 · Intelbras · Intelbras Rf 301K

Name of the Vulnerable Software and Affected Versions: Intelbras RF 301K version 1.1.5 Description: A problematic issue has been found in the component Add Static IP, where the manipulation of the Description argument leads to cross-site scripting. This issue can be exploited remotely...

CVE-2025-4941

creationtimestamp| type| source ---|---|--- 2025-05-19 17:39:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16901 2025-07-15 14:32:44+00:00| seen| https://bsky.app/profile/thezdi.bsky.social/post/3ltz4n3ncak2m...

CVE-2025-4928

creationtimestamp| type| source ---|---|--- 2025-05-19 10:38:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16837 2025-05-19 13:13:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnk5clr2t...

CVE-2025-37891

creationtimestamp| type| source ---|---|--- 2025-05-19 07:38:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16813 2025-05-19 07:42:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114533369295562334 2025-05-19 09:13:35+00:00| seen|...

CVE-2025-4843

creationtimestamp| type| source ---|---|--- 2025-05-18 00:39:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfszc5tzab2 2025-05-18 01:13:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvqjddh24...

CVE-2025-26086

creationtimestamp| type| source ---|---|--- 2025-05-17 04:43:07+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114521341008289755 2025-05-18 18:08:07+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3lphnmuxh722c...

CVE-2025-2247

creationtimestamp| type| source ---|---|--- 2025-05-16 20:34:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16752 2025-10-16 21:02:44+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrmh6vg2a...

CVE-2025-39491

creationtimestamp| type| source ---|---|--- 2025-05-16 18:37:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpcodolbbh2t...

CVE-2025-47794

creationtimestamp| type| source ---|---|--- 2025-05-16 15:16:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114518167613475040...

CVE-2025-4766

creationtimestamp| type| source ---|---|--- 2025-05-16 09:34:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16666 2025-05-16 13:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpc3ny6goq2h...

CVE-2025-4693

creationtimestamp| type| source ---|---|--- 2025-05-16 06:14:31+00:00| seen| https://bsky.app/profile/silby.bsky.social/post/3lpbesz3np225...

PT-2025-21625 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0 Description: A critical vulnerability has been found in the PHPGurukul Complaint Management System, affecting unknown code of the file /admin/admin-profile.php. The manipulation of the...

GO-2025-3671 ZITADEL Allows IdP Intent Token Reuse in github.com/zitadel/zitadel

ZITADEL Allows IdP Intent Token Reuse in github.com/zitadel/zitadel. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest ...

CVE-2025-30421

creationtimestamp| type| source ---|---|--- 2025-05-15 19:02:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpa7b72uk72e 2025-05-20 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-02...

CVE-2025-44180

creationtimestamp| type| source ---|---|--- 2025-05-15 15:03:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvgzb442n 2025-05-15 16:35:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16528...