23691 matches found
CVE-2025-54351
creationtimestamp| type| source ---|---|--- 2025-08-03 03:01:21+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvhoud3t3a2d 2025-08-03 03:58:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvhs2ctxku2z...
CVE-2025-54350
In iperf before 3.19.1, iperfauth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt...
CVE-2025-54349
In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow...
CVE-2025-54349
CVE-2025-54349 affects iperf3 prior to version 3.19.1, caused by an off-by-one in iperf_auth.c leading to a heap-based buffer overflow. Connected advisories confirm a patch was released with iperf3-3.19.1 (and related debian/alma/linux advisories reference the fix). Affected product is iperf3; ro...
CVE-2025-23279
NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, denial of service, or data tampering...
CVE-2025-54589
Copyparty is a portable file server. In versions 1.18.6 and below, when accessing the recent uploads page at /?ru, users can filter the results using an input field at the top. This field appends a filter parameter to the URL, which reflects its value directly into a...
CVE-2025-31229
creationtimestamp| type| source ---|---|--- 2025-08-02 19:40:01+00:00| seen| https://bsky.app/profile/pocarosa2381.xiaoyaoniang.com/post/3lvgw72xc7c2o...
CVE-2025-8391
creationtimestamp| type| source ---|---|--- 2025-08-02 13:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvg7zj3t3d2k...
CVE-2025-6754
creationtimestamp| type| source ---|---|--- 2025-08-02 10:17:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvfws2qki22e...
CVE-2025-6078
creationtimestamp| type| source ---|---|--- 2025-08-02 05:42:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvfhfr4l2m2l...
CVE-2025-8146
CVE-2025-8146 : Qi Addons For Elementor (WordPress) is vulnerable to Stored Cross-Site Scripting via the TypeOut Text widget in all versions up to and including 1.9.2, due to insufficient input sanitization and output escaping on user attributes. Exploitation requires authenticated access at cont...
CVE-2025-54386
Traefik is an HTTP reverse proxy and load balancer. In versions 2.11.27 and below, 3.0.0 through 3.4.4 and 3.5.0-rc1, a path traversal vulnerability was discovered in WASM Traefik’s plugin installation mechanism. By supplying a maliciously crafted ZIP archive containing file paths with ../...
CVE-2025-54132
CVE-2025-54132 affects Cursor’s Mermaid-based diagram tool prior to version 1.3. An attacker can trigger prompt injections to cause Mermaid-rendered images to fetch data to a remote attacker-controlled server, enabling exfiltration of sensitive information. The issue is fixed in version 1.3; upgr...
CVE-2025-54424 1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution
1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate...
CVE-2013-10057
A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control PDFIN1.ocx, specifically the ConnectToSynactis method. When a long string is passed to this method—intended to populate the ldCmdLine argument of a WinExec call—a strcpy operation overwrites a saved...
CVE-2025-53012
MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. When parsin...
CVE-2025-54782
creationtimestamp| type| source ---|---|--- 2025-08-01 17:27:04+00:00| published-proof-of-concept| https://github.com/nestjs/nest/security/advisories/GHSA-85cg-cmq5-qjm7 2025-08-02 01:31:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvezf6nhoo2m 2025-08-02 01:58:26+00:00| seen...
CVE-2025-48074
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, applications trust unvalidated dataWindow size values from file headers, which can lead to excessive memory allocation and performance...
CVE-2025-41371
creationtimestamp| type| source ---|---|--- 2025-08-01 15:06:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvdwhmmnna2a 2025-08-02 10:31:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvfxkl755q2d...