23592 matches found
CVE-2025-36548
creationtimestamp| type| source ---|---|--- 2025-07-24 15:30:23+00:00| seen| https://infosec.place/objects/cc2a7777-2e45-4874-bf93-dc03dc350ff7...
CVE-2025-8042
creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:20+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2026-04-13 17:57:38+00:00| seen| Telegram/9o4BfNtIOZ97fNW94XQZtKman2tFufd5bSC8ENSBdHyp2c...
CVE-2025-8027
creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:20+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2025-07-25 03:32:52+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4gg2y622g 2025-07-29 13:27:06+00:00| seen|...
CVE-2025-8038
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Firefox ignored paths when checking the validity of navigations in a frame...
CVE-2025-8035
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140, and Thunderbird 140. Some of these bugs showed...
CVE-2025-8028
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On arm64, a WASM brtable instruction with a large number of entries could lead to the label being too far from the instruction, causing truncation and incorrect computation of th...
CVE-2025-3946
creationtimestamp| type| source ---|---|--- 2025-07-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-205-03 2025-07-24 16:04:38+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lupvxrav4i24 2025-09-04 10:00:00+00:00| seen|...
CVE-2025-7966
The CVE-2025-7966 entry concerns the Get Youtube Subs WordPress plugin. Affected versions are all up to and including 3.5, where stored cross-site scripting is possible via the channel, layout, and subs_count parameters due to insufficient input sanitization and output escaping. Authenticated att...
CVE-2025-44109
creationtimestamp| type| source ---|---|--- 2025-07-24 00:27:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luobljwgbj2h 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-03...
CVE-2025-54365
fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests, detect penetration attempts and more. In version 3.0.1, the regular expression patched to mitigate the ReDoS vulnerability by limiting the length of string fails to catch inputs that exceed this...
CVE-2025-7296
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...
CVE-2025-53942 authentik has an insufficient check for account active status during OAuth/SAML authentication
authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set of protocols. In versions 2025.4.4 and earlier, as well as versions 2025.6.0-rc1 through 2025.6.3, deactivated users who registered through OAuth/SAML or linked their accounts to...
CVE-2025-8058
The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...
CVE-2025-46686
Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server allocates memory for the command arguments of every bulk, even when the command is skipped because of insufficient permissions. NOTE: this i...
CVE-2025-46171
creationtimestamp| type| source ---|---|--- 2025-07-23 16:34:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114903514963654205 2025-07-23 18:39:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luno66kqyw27...
CVE-2025-50127
creationtimestamp| type| source ---|---|--- 2025-07-23 15:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luncbbaroo2w...
CVE-2025-6018
A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows an unprivileged local attacker for example, a user logged in via SSH to obtain the elevated privileges normally reserved for a physically present,...
CVE-2010-10012 httpdASM 0.92 Path Traversal
A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system. By sending a specially crafted GET request containing a sequence of URL-encoded backslashes and directory traversal...
CVE-2016-15045 Deepin lastore-daemon Privilege Escalation via Unsigned .deb Installation
A local privilege escalation vulnerability exists in lastore-daemon, the system package manager daemon used in Deepin Linux developed by Wuhan Deepin Technology Co., Ltd.. In versions 0.9.53-1 Deepin 15.5 and 0.9.66-1 Deepin 15.7, the D-Bus configuration permits any user in the sudo group to invo...