PT-2025-48686

The Nexter Extension – Site Enhancements Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nxt-year' shortcode in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-66300

creationtimestamp| type| source ---|---|--- 2025-12-01 20:45:31+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-p4ww-mcp9-j6f2 2025-12-01 22:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xiilr7l42b 2025-12-02 18:10:08+00:00| seen...

CVE-2025-65403

creationtimestamp| type| source ---|---|--- 2025-12-01 16:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115645297038433564 2025-12-01 18:34:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6x2xdcjks2k...

CVE-2025-66305

creationtimestamp| type| source ---|---|--- 2025-12-01 15:52:39+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-m8vh-v6r6-w7p6 2025-12-01 22:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xjcbaijz2n...

CVE-2025-55221

creationtimestamp| type| source ---|---|--- 2025-12-01 15:30:56+00:00| seen| https://infosec.place/objects/b07c452b-428c-48af-a490-215c0e255962...

CVE-2025-35028

creationtimestamp| type| source ---|---|--- 2025-11-30 18:37:00+00:00| seen| http://takeonme.org/cves/cve-2025-35028/ 2025-12-01 00:03:22+00:00| seen| https://infosec.exchange/users/offseq/statuses/115641378475814622 2025-12-01 15:53:16+00:00| seen|...

PT-2025-48405

opening the vault on a 3-year-old vulnerability: CVE-2022-35420 back in 2022, I got bored and decided to hunt for a zero-day instead of writing the red-team report. I found an unauthenticated admin takeover in a SCADA system used to control real-world physical machinery. I waited until now to...

CVE-2025-12816

...

CVE-2025-12977

...

CVE-2025-66221

Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.4, Werkzeug's safejoin function allows path segments with Windows device names. On Windows, there are special device names such as CON, AUX, etc that are implicitly present and readable in every directory...

CVE-2025-58305

creationtimestamp| type| source ---|---|--- 2025-11-28 07:27:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6oebccyn62a...

CVE-2025-66372

creationtimestamp| type| source ---|---|--- 2025-11-28 07:12:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6odggvxb62s...

CVE-2025-66371

creationtimestamp| type| source ---|---|--- 2025-11-28 06:57:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ocmtdjjv2q...

CVE-2025-59821

creationtimestamp| type| source ---|---|--- 2025-11-28 02:05:04+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3m6nsapaknqj2 2025-11-28 08:00:58+00:00| seen| https://gist.github.com/Darkcrai86/c4896fc8ec6b996adce33f90529e1d86...

CVE-2025-13338

creationtimestamp| type| source ---|---|--- 2025-11-28 00:33:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6nn62hi7v2s...

CVE-2025-59365

creationtimestamp| type| source ---|---|--- 2025-11-27 18:57:29+00:00| seen| https://t.me/notlukatsky/7751 2026-03-27 23:00:04+00:00| seen| https://bsky.app/profile/hackmag.com/post/3mi37v3gh6d2y...

CVE-2025-59026

creationtimestamp| type| source ---|---|--- 2025-11-27 13:06:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6mgqrxwix2w...

CVE-2025-13143

creationtimestamp| type| source ---|---|--- 2025-11-27 07:05:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6lsm6pkht2q...

UBUNTU-CVE-2025-66270

The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49...

CVE-2025-7449

creationtimestamp| type| source ---|---|--- 2025-11-26 23:56:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6l2mpgooh2u 2025-11-27 14:45:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m6mmc2leh72h...