CVE-2018-25227

creationtimestamp| type| source ---|---|--- 2026-03-30 12:17:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibneoco5l2z...

CVE-2026-25227

creationtimestamp| type| source ---|---|--- 2026-02-13 06:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116061793833175775 2026-02-13 06:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meptdegp562b 2026-02-13 07:05:02+00:00| seen|...

CVE-2026-25227 authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint

authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using delegated permissions, a User that has the permission Can view Property Mapping or Can view Expression Policy is able to execute arbitrary code within the authentik server contain...

CVE-2026-25227 authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint

authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using delegated permissions, a User that has the permission Can view Property Mapping or Can view Expression Policy is able to execute arbitrary code within the authentik server contain...

CVE-2019-25227

creationtimestamp| type| source ---|---|--- 2025-11-26 23:46:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6l22skyfz2u 2025-11-27 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6nbeazlse2a...

CVE-2024-25227

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via the tblogin parameter in admin login page...

CVE-2022-25227

Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing CORS vulnerability which can allow an unprivileged remote attacker, if they can trick a user into browse malicious site, to obtain an 'ID' that can be used to send websocket requests and achieve RCE...

Joomla! Authentication Bypass Vulnerability (20250402)

Joomla! is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

CVE-2025-25227

creationtimestamp| type| source ---|---|--- 2025-04-08 16:46:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10942 2025-04-08 19:51:39+00:00| seen| https://t.me/cvedetector/22487 2025-04-11 12:07:56+00:00| exploited| https://t.me/jj8tl/206 2025-04-13 12:23:25+00:00|...

CVE-2024-25227

creationtimestamp| type| source ---|---|--- 2024-03-15 07:21:38+00:00| seen| https://t.me/ctinow/208456 2024-03-15 07:26:36+00:00| seen| https://t.me/ctinow/208461...

CVE-2024-25227

CVE-2024-25227 concerns an SQL injection in ABO.CMS 5.8, specifically in the admin login page where the vulnerable parameter is tb_login . The available connected documents explicitly describe that remote attackers can trigger the injection to perform arbitrary code execution, cause DoS, escalate...

CVE-2022-25227

creationtimestamp| type| source ---|---|--- 2022-05-20 16:30:48+00:00| seen| https://t.me/cibsecurity/43040...

CVE-2022-25227

Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing CORS vulnerability which can allow an unprivileged remote attacker, if they can trick a user into browse malicious site, to obtain an 'ID' that can be used to send websocket requests and achieve RCE...

CVE-2022-25227

Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing CORS vulnerability which can allow an unprivileged remote attacker, if they can trick a user into browse malicious site, to obtain an 'ID' that can be used to send websocket requests and achieve RCE...

CVE-2022-25227

Thinfinity VNC v4.0.0.1 is affected by a Cross-Origin Resource Sharing (CORS) flaw that can allow an unprivileged remote attacker, tricked into visiting a malicious site, to obtain an ID that can be used to send websocket requests and achieve remote code execution. The CVE description consistentl...

CVE-2021-25227

creationtimestamp| type| source ---|---|--- 2021-02-04 22:34:29+00:00| seen| https://t.me/cibsecurity/23120...

CVE-2021-25227

Trend Micro Antivirus for Mac 2021 Consumer is vulnerable to a memory exhaustion vulnerability that could lead to disabling all the scanning functionality within the application. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2021-25227

Trend Micro Antivirus for Mac 2021 (Consumer) is affected by a memory exhaustion vulnerability causing a denial of service that can disable scanning. The issue stems from an input handling flaw in the iCoreService binary, requiring local access with low-privilege code and user interaction (visiti...