Lucene search
+L

5933 matches found

Circl
Circl
•added 2025/12/12 8:18 a.m.•14 views

CVE-2025-14062

creationtimestamp| type| source ---|---|--- 2025-12-12 08:18:51+00:00| seen| https://gist.github.com/Darkcrai86/bb923460dd68262d1f513d792af10581...

4.3CVSS5.8AI score0.00151EPSS
SaveExploits0References1
Circl
Circl
•added 2025/12/11 5:39 p.m.•16 views

CVE-2025-14528

creationtimestamp| type| source ---|---|--- 2025-12-11 17:39:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702155519719586 2026-02-10 13:39:31+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-14528.yaml 2026-02-24...

7.5CVSS5.8AI score0.03991EPSS
SaveExploits1References4
Circl
Circl
•added 2025/12/11 5:35 p.m.•17 views

CVE-2025-67739

creationtimestamp| type| source ---|---|--- 2025-12-11 17:35:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7q4dryn6d2q...

3.1CVSS5.8AI score0.00167EPSS
SaveExploits0References1
osv_usn
osv_usn
•added 2025/12/11 5:26 a.m.•22 views

USN-7924-1 libpng1.6 vulnerabilities

It was discovered that libpng incorrectly handled memory when processing certain PNG files, which could result in an out-of-bounds memory access. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash,...

7.1CVSS6.4AI score0.00417EPSS
SaveExploits5References5
Snyk
Snyk
•added 2025/12/11 1:49 a.m.•8 views

Improper Handling of Case Sensitivity

Overview org.webjars.npm:formio is an A Form and Data Management Platform for Progressive Web Applications Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via improper handling of the path parameter. An attacker can gain unauthorized access to protected A...

8.7CVSS5.8AI score0.00312EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/11 12:00 a.m.•9 views

CVE-2025-67718: Improper Handling of Case Sensitivity

Form.io is a combined Form and API platform for Serverless applications. Versions 3.5.6 and below and 4.0.0-rc.1 through 4.4.2 contain a flaw in path handling which could allow an attacker to access protected API endpoints by sending a crafted request path. An unauthenticated or unauthorized...

8.7CVSS5.8AI score0.00312EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•18 views

CVE-2025-62102

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

4.3CVSS6.9AI score0.00131EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/12/10 12:36 a.m.•12 views

SUSE CVE-2023-53788

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/ca0132: fixup buffer overrun at tuningctlset tuningctlset might have buffer overrun at X if it didn't break from loop by matching A. static int tuningctlset... for i = 0; i TUNINGCTLSCOUNT; i++ A if nid ==...

5.5CVSS6AI score0.0021EPSS
SaveExploits0References8
Circl
Circl
•added 2025/12/10 12:05 a.m.•27 views

CVE-2025-66645

creationtimestamp| type| source ---|---|--- 2025-12-10 00:05:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lr6xdokj2r...

7.5CVSS5.8AI score0.0112EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2025/12/10 12:00 a.m.•22 views

PT-2025-50913

CVE-2025-67498 - Apache HTTP Server Authentication Bypass CVE ID : CVE-2025-67498 Published : Dec. 9, 2025, 11:16 p.m. | 1 hour, 48 minutes ago Description : Rejected reason: Further research determined the issue is not a vulnerability. Severity: 0.0 | NA Visit the link for more details, such as...

6.9AI score
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/12/10 12:00 a.m.•23 views

Chasing Shadows: Pitfalls in LLM Security Research

Large language models LLMs are increasingly prevalent in security research. Their unique characteristics, however, introduce challenges that undermine established paradigms of reproducibility, rigor, and evaluation. Prior work has identified common pitfalls in traditional machine learning researc...

7AI score
SaveExploits0
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•18 views

EUVD-2025-202033

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

6.3AI score0.00131EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/09 5:03 p.m.•3 views

CVE-2022-50676

A potential deadlock vulnerability was found in the RDS Reliable Datagram Sockets TCP transport in the Linux kernel. In rdstcpresetcallbacks, canceldelayedworksync is called while holding the socket lock locksock. However, the worker functions rdssendxmit and rdsrecvworker may also try to acquire...

4.7CVSS6.2AI score0.00954EPSS
SaveExploits0References4
NVD
NVD
•added 2025/12/09 4:18 p.m.•17 views

CVE-2025-62102

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

4.3CVSS0.00131EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:52 p.m.•24 views

CVE-2025-62102

CVE-2025-62102 : A Cross-Site Request Forgery (CSRF) vulnerability affects the WordPress plugin DoFollow Case by Case (versions up to 3.5.1). The vulnerability is documented across multiple sources (NVD/Red Hat/EUVD/CVE list) as CSRF in this plugin, with affected range stated as n/a through 3.5.1...

4.3CVSS5.8AI score0.00131EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 2:52 p.m.•40 views

CVE-2025-62102 WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

4.3CVSS0.00131EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:52 p.m.•11 views

CVE-2025-62102 WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

4.3CVSS5.8AI score0.00131EPSS
SaveExploits0References1
Circl
Circl
•added 2025/12/09 3:05 a.m.•17 views

CVE-2025-42878

creationtimestamp| type| source ---|---|--- 2025-12-09 03:05:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7jkr3fxzs2x 2025-12-09 07:41:45+00:00| seen| https://gist.github.com/Darkcrai86/6c576d578ad0e0082a248502ee6d2a97 2025-12-09 08:09:11+00:00| seen|...

8.2CVSS7.6AI score0.00359EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2025/12/09 1:16 a.m.•13 views

UBUNTU-CVE-2023-53788

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/ca0132: fixup buffer overrun at tuningctlset tuningctlset might have buffer overrun at X if it didn't break from loop by matching A. static int tuningctlset... for i = 0; i TUNINGCTLSCOUNT; i++ A if nid ==...

6.1AI score0.0021EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•16 views

WordPress plugin DoFollow Case by Case 跨站请求伪造漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin i...

4.3CVSS6.3AI score0.00131EPSS
SaveExploits0References1
Rows per page
Query Builder