78531 matches found
CVE-2019-25245
creationtimestamp| type| source ---|---|--- 2025-12-24 19:37:01+00:00| seen| https://bsky.app/profile/potato.software/post/3maqz6fa6iw24 2025-12-24 20:26:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3xpbzcp2p 2025-12-24 20:27:01+00:00| seen|...
CVE-2019-25258 LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities
LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers to read arbitrary files through unverified 'suffix' and 'fileVersion' parameters. Attackers can exploit directory traversal techniques in /thumbnail and /convertpdf endpoints to...
CVE-2019-25251
CVE-2019-25251 affects Teradek VidiU Pro 3.0.3. The vulnerability is a server-side request forgery in the management interface that allows manipulation of the GET parameters url and xml_url, enabling attackers to bypass firewalls, perform network enumeration, and potentially trigger external HTTP...
CVE-2019-25238
The provided connected documents confirm CVE-2019-25238 concerns V-SOL GPON/EPON OLT Platform 2.03 and describe a cross-site request forgery (CSRF) vulnerability. Exploitation involves convincing authenticated administrators to load a malicious page, enabling attackers to perform actions such as ...
CVE-2019-25237 V-SOL GPON/EPON OLT Platform 2.03 Privilege Escalation via User Role Parameter
V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with 'userrolemod' set to integer value '...
CVE-2019-25234 Carlo Gavazzi SmartHouse Webapp 6.5.33 Cross-Site Request Forgery and XSS
SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions. Attackers can exploit these vulnerabilities by tricking logged-in users into visiting malicious websites or injecting malicious...
CVE-2019-25236 iSeeQ Hybrid DVR WH-H4 1.03R Unauthenticated Live Stream Disclosure
iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the getjpeg script that allows unauthorized access to live video streams. Attackers can retrieve video snapshots from specific camera channels by sending requests to the /cgi-bin/getjpeg endpoint without authentication...
CVE-2019-25235 Smartwares HOME easy 1.0.9 Client-Side Authentication Bypass via Web Pages
Smartwares HOME easy 1.0.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to access administrative web pages by disabling JavaScript. Attackers can navigate to multiple administrative endpoints and to bypass client-side validation and access sensitive system...
The ‘Epstein’s Suicide’ Video in the Latest DOJ Release Isn’t What It Seems
Here’s how a fake clip from 2019 wound up in the latest Justice Department Epstein files dump...
CVE-2019-25229
creationtimestamp| type| source ---|---|--- 2025-12-18 22:59:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3macbo3vbb72x...
runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process...
📄 Mantis Bug Tracker 2.3.0 Remote Code Execution
Mantis Bug Tracker version 2.3.0 unauthenticated remote code execution exploit that chains together two vulnerabilities. The exploit resets the administrator password and then takes advantage of a command injection vulnerability. Exploit Title: Mantis Bug Tracker 2.3.0 - Remote Code Execution...
December 18, 2025—KB5074975 (OS Build 17763.8148) Out-of-band
None None...
📄 IBM BigFix Platform 9.2 Information Disclosure
IBM BigFix Platform version 9.2 information gathering proof of concept exploit. ============================================================================================================================================= | Title : IBM BigFix Platform 9.2 gather information Vulnerability | | Auth...
CVE-2019-14697
creationtimestamp| type| source ---|---|--- 2025-12-14 08:52:53+00:00| seen| https://gist.github.com/LavrukhinaV/c5dec5c8620e117b91092bb60d984a6c 2025-12-21 19:31:57+00:00| seen| https://gist.github.com/Butters7/22af3fa700a8f26bc5d0c4e0e4e65ebd 2025-12-31 17:51:53+00:00| seen|...
OESA-2025-2796 bwa security update
BWA is a program for aligning sequencing reads against a large reference genome e.g. human genome. It has two major components, one for read shorter than 150bp and the other for longer reads. Security Fixes: BWA aka Burrow-Wheeler Aligner before 2019-01-23 has a stack-based buffer overflow in the...
OESA-2025-2799 bwa security update
BWA is a program for aligning sequencing reads against a large reference genome e.g. human genome. It has two major components, one for read shorter than 150bp and the other for longer reads. Security Fixes: BWA aka Burrow-Wheeler Aligner before 2019-01-23 has a stack-based buffer overflow in the...
CVE-2019-9182
creationtimestamp| type| source ---|---|--- 2025-12-10 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m7nxg7lghi2g...
iOS 12 / macOS 10.14 voucher_swap Use-After-Free
Proof of concept for an older vulnerability from 2019. A use-after-free vulnerability in Apple's Mach voucher subsystem affects macOS version 10.14 and iOS version 12...
