[17/09/2025 21:38] Com alterações, Senado aprova isenção da conta de luz - CNN Brasil

[17/09/2025 20:38] Aliados relatam irritação de Lula com 12 deputados petistas que votaram a favor da PEC da Blindagem - O Globo

[17/09/2025 16:05] Lula diz a aliados que é a favor de ‘anistia light’ com redução de penas para condenados do 8/1 - Estadão

[17/09/2025 13:07] PCC: Vivo sob um decreto de morte que não tem volta, diz Lincoln Gakiya, que investiga a facção há 20 anos - BBC

[17/09/2025 18:57] 'Trump tem relação com Bolsonaro, não com o Brasil', diz Lula - UOL Notícias

[17/09/2025 17:49] ‘Está impossível’: O desabafo de Alcolumbre em meio à pressão por anistia - CartaCapital

[17/09/2025 18:05] Lula sanciona lei que combate 'adultização' de crianças na internet e cria regras para empresas de redes sociais - G1

[17/09/2025 11:20] Ex-diretor da PF na gestão Lula é preso contra corrupção - Gazeta do Povo

[17/09/2025 20:46] Moraes cita "problemas" e dispensa GSI de escolta de Bolsonaro - Poder360

[17/09/2025 19:05] Mobilidade urbana: Damião e Lula assinam contratos de R$770 milhões - Estado de Minas

[CVE-2025-5004] [Modified: 28-08-2025] [Analyzed] [V3.1 S7.3:HIGH] A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/add_course.php. The manipulation of the argument c/subname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-5006] [Modified: 28-05-2025] [Analyzed] [V3.1 S7.3:HIGH] A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/category.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-5008] [Modified: 28-08-2025] [Analyzed] [V3.1 S7.3:HIGH] A vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_teacher.php. The manipulation of the argument e leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

[CVE-2025-5010] [Modified: 17-06-2025] [Analyzed] [V3.1 S2.4:LOW] A vulnerability classified as problematic has been found in moonlightL hexo-boot 4.3.0. This affects an unknown part of the file /admin/home/index.html of the component Blog Backend. The manipulation of the argument Description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-5011] [Modified: 17-06-2025] [Analyzed] [V3.1 S2.4:LOW] A vulnerability classified as problematic was found in moonlightL hexo-boot 4.3.0. This vulnerability affects unknown code of the file /admin/home/index.html of the component Dynamic List Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

[CVE-2025-4094] [Modified: 09-06-2025] [Analyzed] [V3.1 S9.8:CRITICAL] The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.

[CVE-2025-5013] [Modified: 17-06-2025] [Analyzed] [V3.1 S4.3:MEDIUM] A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

[CVE-2021-25254] [Modified: 10-06-2025] [Analyzed] [V3.1 S5.3:MEDIUM] Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

[CVE-2021-25255] [Modified: 10-06-2025] [Analyzed] [V3.1 S7.5:HIGH] Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.

[CVE-2021-25262] [Modified: 10-06-2025] [Analyzed] [V3.1 S5.4:MEDIUM] Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.

[CVE-2025-4949] [Modified: 25-08-2025] [Analyzed] [V3.1 S9.8:CRITICAL] In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues.

[CVE-2019-16536] [Modified: 25-06-2025] [Analyzed] [V3.1 S8.8:HIGH] Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.

[CVE-2025-1712] [Modified: 22-08-2025] [Analyzed] [V3.1 S8.8:HIGH] Argument injection in special agent configuration in Checkmk <2.4.0p1, <2.3.0p32, <2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files

[CVE-2024-42922] [Modified: 25-06-2025] [Analyzed] [V3.1 S6.5:MEDIUM] AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability.

[CVE-2025-44892] [Modified: 03-06-2025] [Analyzed] [V3.1 S6.5:MEDIUM] FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ownekey parameter in the web_rmon_alarm_post_rmon_alarm function.

[CVE-2025-44895] [Modified: 03-06-2025] [Analyzed] [V3.1 S6.5:MEDIUM] FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ipv4Aclkey parameter in the web_acl_ipv4BasedAceAdd function.

[CVE-2024-23337] [Modified: 20-06-2025] [Analyzed] [V3.1 S4.3:MEDIUM] jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue.

[CVE-2025-27997] [Modified: 03-06-2025] [Analyzed] [V3.1 S8.4:HIGH] An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory.

[CVE-2025-48206] [Modified: 01-08-2025] [Analyzed] [V3.1 S6.1:MEDIUM] The ns_backup extension through 13.0.0 for TYPO3 allows XSS.

[CVE-2024-56428] [Modified: 25-06-2025] [Analyzed] [V3.1 S5.5:MEDIUM] The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials (from the CONFIGS table) for their servers configured in the client.