23691 matches found
CVE-2025-1658
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2025-1883
Out-Of-Bounds Write vulnerability exists in the OBJ file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted OBJÂ file...
CVE-2025-1982
Local File Inclusion vulnerability in Ready's attachment upload panel allows low privileged user to provide link to a local file using the file:// protocol thus allowing the attacker to read content of the file. This vulnerability can be use to read content of system files...
CVE-2025-1650
A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2025-1079
Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature...
CVE-2025-1305
The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.5.4. This is due to missing or incorrect nonce validation on the newsbloggerinstallandactivateplugin function. This makes it possible for unauthenticated attackers to upload...
CVE-2025-1675
The function dnscopyqname in dnspack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data...
CVE-2022-27482
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiADC version 7.0.0 through 7.0.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.6, 6.0.x, 5.x.x allows attacker to execute arbitrary shell code as root via CLI commands...
CVE-2019-12936
BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions...
CVE-2025-27807
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The lack of a length check leads to out-of-bounds writes via malformed NAS...
CVE-2025-67732
creationtimestamp| type| source ---|---|--- 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg 2026-01-06 00:22:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpopleedi2x 2026-01-07 04:15:13+00:00| seen|...
CVE-2025-12513
creationtimestamp| type| source ---|---|--- 2026-01-05 15:03:42+00:00| published-proof-of-concept| Telegram/r7w3jNv4NOtgOUjuvoaTI3A2tPL2izMDUmcbBcA0oC5b5w 2026-01-05 16:30:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbouea2vya2c 2026-01-08 14:15:08+00:00| seen|...
CVE-2025-68044
Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Five Star Restaurant Reservations: from n/a through = 2.7.4...
WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability
Software : Gecko Type : Theme Vulnerable versions : = 1.9.8 OWASP Top 10 : A3: Injection Classification : Local File Inclusion CVE ID : CVE-2025-69080 Patchstack priority : High CVSS severity : 8.1 Required privilege : Unauthenticated Developer : Claim ownership PSID : 0d458b5a65e6 Credits : Tran...
BELL-CVE-2023-54274
Bulletin has no description...
CVE-2025-22194
creationtimestamp| type| source ---|---|--- 2026-01-01 04:35:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbdkj4fr7a2m...
CVE-2025-67704
creationtimestamp| type| source ---|---|--- 2026-01-01 00:52:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd62girln2x 2026-01-02 08:01:30+00:00| seen| https://gist.github.com/Darkcrai86/db1f8fb7d89d85a94d2e504d889a10ca 2026-01-02 18:50:43+00:00| published-proof-of-concept|...
WordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Tran Tuan Dung domiee13 in WordPress Plugin Behance Portfolio Manager versions = 1.7.5...
WordPress Import into Easy Property Listings plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Import into Easy Property Listings versions = 2.2.1...