23691 matches found
CVE-2025-54119
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versions 5.22.9 and below, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a sqlite3 database a...
CVE-2025-54870 VTun-ng's failure to initialize encryption modules may cause reversion to plaintext
VTun-ng is a Virtual Tunnel over TCP/IP network. In versions 3.0.17 and below, failure to initialize encryption modules might cause reversion to plaintext due to insufficient error handling. The bug was first introduced in VTun-ng version 3.0.12. This is fixed in version 3.0.18. To workaround thi...
CVE-2025-43978
The Jointelli 5G CPE 21H01 router, running firmware version JY_21H01_A3_v1.36 , is vulnerable to a (blind) OS command injection flaw. The issue resides in multiple API endpoints, specifically /ubus/?flag=set_WPS_pin, /ubus/?flag=netAppStar1, and /ubus/?flag=set_wifi_cfgs. An authenticated attacke...
CVE-2025-50592
Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...
CVE-2025-51726
creationtimestamp| type| source ---|---|--- 2025-08-04 23:48:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvmeziuc7d2p 2025-08-06 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvr4obb3oj2a...
CVE-2025-54554
tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the underlying SQL queries and database structure...
CVE-2025-50420
An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service DoS...
CVE-2025-8518
CVE-2025-8518 affects givanz Vvveb CMS (Code Editor, Save function in admin/controller/editor/code.php) with a code injection vulnerability in version 1.0.5. Public exploits and PoCs exist (remote-friendly, authenticated access to Code Editor can lead to RCE when modified files are executed). Aff...
CVE-2025-36606
creationtimestamp| type| source ---|---|--- 2025-08-04 15:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvlkqbq6f52z...
CVE-2025-30096
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...
CVE-2025-41659
creationtimestamp| type| source ---|---|--- 2025-08-04 10:07:24+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lvkwxdvirms2 2026-02-24 19:30:01+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-163 2026-03-17...
CVE-2025-54424
1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate...
CVE-2025-20697
creationtimestamp| type| source ---|---|--- 2025-08-04 05:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvkiwwartj2q 2025-08-04 06:01:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvkjfbrlf32t...
CVE-2025-50420
An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service DoS...
CVE-2025-51726
The CyberGhostVPNSetup.exe Windows installer is vulnerable to supply-chain attacks and privilege escalation due to two critical security misconfigurations. First, the installer uses the weak SHA-1 cryptographic hash algorithm for its signature; an attacker can exploit this via collision attacks t...
CVE-2025-50420
The pdfseparate utility in freedesktop poppler versions prior to 25.07.0 is vulnerable to an infinite recursion issue. The root cause lies in the PDFDoc processing logic where "/Annots" dictionaries that reference themselves or each other trigger a recursive loop in the sequence markAnnotations -...
CVE-2025-31716
In bootloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed...
CVE-2025-8507
creationtimestamp| type| source ---|---|--- 2025-08-03 14:13:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lviufrlwam2l...
CVE-2024-51775
creationtimestamp| type| source ---|---|--- 2025-08-03 14:08:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lviu4smmny2q 2025-08-03 16:13:21+00:00| seen| https://seclists.org/oss-sec/2025/q3/74 2025-08-03 18:37:47+00:00| seen|...