4894 matches found
CVE-2025-6490
creationtimestamp| type| source ---|---|--- 2025-06-22 19:46:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19173 2025-06-22 22:04:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsa35kkjrt2r...
CVE-2025-38009
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: disable napi on driver removal A warning on driver removal started occurring after commit 9dd05df8403b "net: warn if NAPI instance wasn't shut down". Disable tx napi before deleting it in mt76dmacleanup. WARNING: CPU:...
CVE-2025-5741
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file reads from the charging station. The exploitation of this vulnerability does require an authenticated session of the web server...
CVE-2025-5740
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path...
Amazon Linux 2 : openssh (ALAS-2025-2881)
The version of openssh installed on the remote host is prior to 7.4p1-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2881 advisory. In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11...
CVE-2025-47066
creationtimestamp| type| source ---|---|--- 2025-06-11 19:33:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18134...
CVE-2025-49710
An integer overflow was present in OrderedHashTable used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4...
CVE-2025-47015
creationtimestamp| type| source ---|---|--- 2025-06-10 22:32:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18008...
CVE-2025-5740
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path...
CVE-2025-5741
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file reads from the charging station. The exploitation of this vulnerability does require an authenticated session of the web server...
CVE-2025-5741
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file reads from the charging station. The exploitation of this vulnerability does require an authenticated session of the web server...
CVE-2025-5741
CVE-2025-5741 affects Schneider Electric EVLink WallBox charging stations. The vulnerability is a Path Traversal (CWE-22) in the web server component that could allow an authenticated user to read arbitrary files on the device. Public documents note that exploitation requires an authenticated ses...
CVE-2025-5740
CVE-2025-5740 describes a CWE-22 path traversal in Schneider Electric EVLink WallBox (home charging station). Affected component is the web server handling file paths; root cause is improper limitation of a pathname to a restricted directory. The vulnerability could allow an authenticated user to...
CVE-2025-5740
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path...
CVE-2025-5740
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path...
Important: nodejs22
Issue Overview: Corrupted pointer in node::fs::ReadFileUtf8const FunctionCallbackInfo& args when args0 is a string, resulting in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory growth, leading to a denial of service. Info:...
CVE-2025-48416
An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in via SSH. This configuration can be...
CVE-2022-24311
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends...
CVE-2022-24312
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends a...