CVE-2025-26011

Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setUsernamePassword...

CVE-2025-2722

Last updated 25 March 2025...

CVE-2025-30558

Cross-Site Request Forgery CSRF vulnerability in EnzoCostantini55 ANAC XML Render anac-xml-render allows Stored XSS.This issue affects ANAC XML Render: from n/a through = 1.5.7...

CVE-2025-2482

creationtimestamp| type| source ---|---|--- 2025-03-22 07:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uzg3zk24 2025-03-22 10:22:25+00:00| seen| https://t.me/cvedetector/20855...

CVE-2025-2477

creationtimestamp| type| source ---|---|--- 2025-03-22 07:38:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uz3h5r2h 2025-03-22 10:22:32+00:00| seen| https://t.me/cvedetector/20861...

CVE-2025-2484

creationtimestamp| type| source ---|---|--- 2025-03-22 07:38:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uyqnpo2s 2025-03-22 10:22:25+00:00| seen| https://t.me/cvedetector/20856...

CVE-2025-0192

creationtimestamp| type| source ---|---|--- 2025-03-20 13:03:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr44fju72s 2025-03-20 13:13:16+00:00| seen| https://t.me/cvedetector/20721 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-27786

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file removal in core.py. outputttspath in tts.py takes arbitrary user input and passes it to runttsscript function in core.py, which checks if the path in outputttspath exists, and if yes, removes that...

CVE-2025-30116

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Remotely Dumping of Video Footage and the Live Video Stream can occur. It allows remote attackers to access and download recorded video footage from the SD card via port 9091. Additionally, attackers can connect to port 90...

CVE-2025-2382

creationtimestamp| type| source ---|---|--- 2025-03-17 16:33:06+00:00| published-proof-of-concept| Telegram/k2hWLXjvKh8ojTF1EeSN0Mqc987DrfNzj7Aa-hbf1HoriQ 2025-03-17 17:27:57+00:00| seen| https://t.me/cvedetector/20468 2025-03-17 17:45:49+00:00| seen|...

CVE-2024-13126

The CVE-2024-13126 entry concerns the WordPress Download Manager plugin before version 3.3.07, which does not prevent directory listing on web servers that do not use htaccess. This allows unauthenticated access to files stored in the plugin’s download-manager-files directory (unauthenticated dat...

CVE-2025-21863

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...

CVE-2025-20931

Out-of-bounds write in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code...

CVE-2024-13897

creationtimestamp| type| source ---|---|--- 2025-03-06 08:37:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6656 2025-03-06 09:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljp77j3v542a 2025-03-06 11:20:05+00:00| seen| https://t.me/cvedetector/19691 2025-03-08...

CVE-2025-20916

creationtimestamp| type| source ---|---|--- 2025-03-06 05:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljorixihvt2e 2025-03-06 07:09:33+00:00| seen| https://t.me/cvedetector/19688...

CVE-2025-1933

On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. This vulnerability affects Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...

CVE-2025-27426 Firefox Mobile iOS Full Address Bar Spoof Using Server-Side Redirect to internal error page

Malicious websites utilizing a server-side redirect to an internal error page could result in a spoofed website URL. This vulnerability was fixed in Firefox for iOS 136...

CVE-2024-53387

A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2025-21790

In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlanvnigroupinit return value vxlaninit must check vxlanvnigroupinit success otherwise a crash happens later, spotted by syzbot. Oops: general protection fault, probably for non-canonical address 0xdffffc000000002c:...

CVE-2025-21781

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix panic during interface removal Reference counting is used to ensure that batadvhardifneighnode and batadvhardiface are not freed before/during batadvvelpthroughputmetricupdate work is finished. But there isn't a...