23591 matches found
CVE-2025-54870
creationtimestamp| type| source ---|---|--- 2025-08-05 03:58:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvmsyyidi52q...
CVE-2025-8629
creationtimestamp| type| source ---|---|--- 2025-08-05 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-777/...
CVE-2025-8524
creationtimestamp| type| source ---|---|--- 2025-08-05 00:12:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvmgeyptll2d...
CVE-2025-54119
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versions 5.22.9 and below, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a sqlite3 database a...
CVE-2025-54870 VTun-ng's failure to initialize encryption modules may cause reversion to plaintext
VTun-ng is a Virtual Tunnel over TCP/IP network. In versions 3.0.17 and below, failure to initialize encryption modules might cause reversion to plaintext due to insufficient error handling. The bug was first introduced in VTun-ng version 3.0.12. This is fixed in version 3.0.18. To workaround thi...
CVE-2025-50592
Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...
CVE-2025-43978
Jointelli 5G CPE 21H01 firmware JY_21H01_A3_v1.36 is affected by a blind OS command injection affecting multiple endpoints (including /ubus/?flag=set_WPS_pin, /ubus/?flag=netAppStar1, /ubus/?flag=set_wifi_cfgs). An authenticated attacker can execute arbitrary OS commands with root privileges by s...
CVE-2025-51726
creationtimestamp| type| source ---|---|--- 2025-08-04 23:48:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvmeziuc7d2p 2025-08-06 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvr4obb3oj2a...
CVE-2025-54554
tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the underlying SQL queries and database structure...
CVE-2025-50420
An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service DoS...
CVE-2025-8518
CVE-2025-8518 affects givanz Vvveb CMS (Code Editor, Save function in admin/controller/editor/code.php) with a code injection vulnerability in version 1.0.5. Public exploits and PoCs exist (remote-friendly, authenticated access to Code Editor can lead to RCE when modified files are executed). Aff...
CVE-2025-36606
creationtimestamp| type| source ---|---|--- 2025-08-04 15:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvlkqbq6f52z...
CVE-2025-30096
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...
CVE-2025-41659
creationtimestamp| type| source ---|---|--- 2025-08-04 10:07:24+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lvkwxdvirms2 2026-02-24 19:30:01+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-163 2026-03-17...
CVE-2025-54424
1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate...
CVE-2025-20697
creationtimestamp| type| source ---|---|--- 2025-08-04 05:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvkiwwartj2q 2025-08-04 06:01:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvkjfbrlf32t...
CVE-2025-51726
CVE-2025-51726 concerns the CyberGhostVPNSetup.exe Windows installer. The supplied documents confirm two concrete issues: (1) signing with the weak hash algorithm SHA-1 , enabling potential forged certificates that may bypass signature checks on systems without strict SmartScreen/trust policy enf...
CVE-2025-50420
An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service DoS...
CVE-2025-50420
The CVE-2025-50420 entry concerns the pdfseparate utility of freedesktop poppler. The connected documents confirm a vulnerability in poppler v25.04.0 where a crafted PDF can cause infinite recursion, leading to Denial of Service (DoS). Several vendor advisories (SUSE SUSE-SU-2025:02791-1, SUSE-SU...