33727 matches found
EUVD-2025-200033
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...
CVE-2025-54849
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...
CVE-2025-12106
Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...
CVE-2025-12106
CVE-2025-12106 affects OpenVPN 2.7_alpha1 through 2.7_rc1, where insufficient argument validation allows a heap buffer over-read while parsing IP addresses. This could enable a remote attacker to read beyond allocated buffers, potentially impacting confidentiality and availability. Public notes a...
CVE-2025-12106
Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...
CVE-2025-12106
Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...
CVE-2025-12106
Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...
CVE-2025-13798
A flaw has been found in ADSLR NBR1005GPEV2 250814-r037c. This affects the function apmacfilteradd of the file /sendorder.cgi. Executing manipulation of the argument mac can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. The...
PT-2025-48478
Name of the Vulnerable Software and Affected Versions Socomec DIRIS Digiware M-70 version 1.6.9 Description A denial of service condition can occur in the Modbus TCP and Modbus RTU over TCP functionality. An attacker can trigger this by sending a sequence of unauthenticated network packets...
Deco Apps Library / MCP Servers 代码问题漏洞
Deco Apps Library / MCP Servers is a content management system from deco.cx open source. A code issue vulnerability exists in Deco Apps Library / MCP Servers version 0.120.1 and earlier, which stems from incorrect manipulation of the parameter url in the file website/loaders/analyticsScript.ts,...
PT-2025-52207
Name of the Vulnerable Software and Affected Versions Nodemailer affected versions not specified Description A flaw exists in Nodemailer that can lead to a denial of service DoS. This occurs due to a crafted email address header triggering infinite recursion within the address parser...
PUB-A-427224084
In GetHostAddress of gxpbuffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-12143
creationtimestamp| type| source ---|---|--- 2025-11-28 14:33:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6p43lltmi2s 2026-05-21 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-05 2026-05-24 20:13:41+00:00| seen|...
CVE-2025-66386
creationtimestamp| type| source ---|---|--- 2025-11-28 10:54:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6optmticc2x 2025-12-03 19:49:28+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m74a3bsoik2j...
CVE-2025-58304
creationtimestamp| type| source ---|---|--- 2025-11-28 07:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6od5ihkgp2q...
Use Of Externally-Controlled Input To Select Classes Or Code ('Unsafe Reflection')
Astro is vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection'. The vulnerability is due to Astro reflecting the unvalidated X-Forwarded-Host header in Astro.url, which allows an attacker to supply a malicious header value that can manipulate generated...
Nextcloud: Roundcube Webmail Style Sanitizer can be bypassed using CSS Character Escapes
A vulnerability was discovered in the style sanitizer of Roundcube Webmail that allowed bypassing the sanitizer using CSS character escapes. This enabled the use of arbitrary inline CSS, such as the url function, which could be used to retrieve the IP address and user agent of the person reading...
CVE-2025-64126
An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user input without verifying it is a valid IP address or filtering potentially malicious characters. This could allow an unauthenticated attacker to inject arbitrary...
