CVE-2022-4979

creationtimestamp| type| source ---|---|--- 2025-07-25 16:37:35+00:00| seen| Telegram/MXVxMFIqDRtThPQ4j0phWNXWBLZUqCPfzRHJPf1nq-xVycM...

RHSA-2024:6153

creationtimestamp| type| source ---|---|--- 2025-07-05 06:11:35+00:00| seen| Telegram/WxoSytSs8Fl40qZITd-i05zi6GItywBUr-TJik2yh5HrF8...

CVE-2024-49366

Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the json field without verification, and can construct a value value in the form of ../../. Arbitrary files can be written to the server, which may result in loss of permissions...

CVE-2025-3440

creationtimestamp| type| source ---|---|--- 2025-05-15 16:35:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16532...

CVE-2025-24216

creationtimestamp| type| source ---|---|--- 2025-04-03 20:35:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10348...

CVE-2024-37917

creationtimestamp| type| source ---|---|--- 2025-04-03 15:35:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10249...

CVE-2025-31582

creationtimestamp| type| source ---|---|--- 2025-04-03 14:35:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10220...

CVE-2025-27403

creationtimestamp| type| source ---|---|--- 2025-03-11 14:39:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7151 2025-03-11 17:37:30+00:00| seen| https://t.me/cvedetector/20086 2025-08-13 13:26:35+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2023-36542

creationtimestamp| type| source ---|---|--- 2025-02-13 19:17:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4318 2025-08-22 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwze4w3pyz2c...

CVE-2025-26353

A CWE-35 "Path Traversal" in maxtime/api/sql/sql.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests...

CVE-2025-26352

The CVE-2025-26352 entry documents a CWE-35 path traversal in the template deletion mechanism of Q-Free MaxTime (≤ v2.11.0). An authenticated remote attacker can delete sensitive files via crafted HTTP requests, due to the insecure handling in the deletion path. Impact is described as the ability...

CVE-2021-31515

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Updated to Java 8.0 Service Refresh 8 Fix Pack 35 with Oracle October 15 2024 CPU bsc1232064: - CVE-2024-21208: Fixed partial DoS in component Networking bsc1231702,JDK-8328286 - CVE-2024-21210: Fixed unauthorized update, insert or delete...

SUSE-SU-2024:4252-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Updated to Java 8.0 Service Refresh 8 Fix Pack 35 with Oracle October 15 2024 CPU bsc1232064: - CVE-2024-21208: Fixed partial DoS in component Networking bsc1231702,JDK-8328286 - CVE-2024-21210: Fixed unauthorized update, insert or delete...

CVE-2024-47430

creationtimestamp| type| source ---|---|--- 2024-11-12 22:15:35+00:00| seen| https://t.me/cvedetector/10729...

CVE-2024-10806

creationtimestamp| type| source ---|---|--- 2024-11-05 02:59:35+00:00| seen| https://t.me/cvedetector/9810...

CVE-2024-49366 Nginx UI's json field can construct a directory traversal payload, causing arbitrary files to be written

Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the json field without verification, and can construct a value value in the form of ../../. Arbitrary files can be written to the server, which may result in loss of permissions...

Nginx UI 路径遍历漏洞

Nginx UI is a WebUI for Nginx by Jacky Personal Developer. A path traversal vulnerability exists in Nginx UI 2.0.0-beta.35 and earlier versions, which originates from obtaining a value from a json field without authentication, writing an arbitrary file to the server, and leading to loss of...

Adobe After Effects < 17.1.1 Multiple Arbitrary Code Execution (APSB20-35) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 17.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-35 advisory. - Adobe After Effects versions 17.1 and earlier have an out-of-bounds write vulnerability. Successful...

Adobe Prelude < 8.1.1 Arbitrary code execution (APSB19-35)

The version of Adobe Prelude installed on the remote Windows host is prior to 8.1.1. It is, therefore, affected by a vulnerability as referenced in the APSB19-35 advisory. - Adobe Prelude CC versions 8.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful...