23691 matches found
CVE-2025-48932
creationtimestamp| type| source ---|---|--- 2025-07-23 10:13:13+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lumruhat6b2v 2025-07-23 14:47:59+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lunb7rep3w2d 2025-07-24 09:30:19+00:00| published-proof-of-concep...
CVE-2025-54440
creationtimestamp| type| source ---|---|--- 2025-07-23 07:31:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumitq3uql2h 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-657/...
CVE-2025-42947
creationtimestamp| type| source ---|---|--- 2025-07-23 06:58:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumgyehibz2t 2026-08-13 08:47:29+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...
CVE-2025-6215
creationtimestamp| type| source ---|---|--- 2025-07-23 06:30:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumfg63wyl2w 2025-11-12 11:34:36+00:00| seen| https://threatintel.cc/2025/11/12/update-now-november-patch-tuesday.html 2025-11-12 12:34:28+00:00| seen|...
CVE-2025-6174 WordPress Qwizcards <= 3.9.4 - Reflected XSS
The Qwizcards | online quizzes and flashcards WordPress plugin through 3.9.4 does not sanitise and escape the "stylesheet" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or any other user...
CVE-2025-54442
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...
CVE-2025-54455
Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0...
CVE-2025-54141
ViewVC is a browser interface for CVS and Subversion version control repositories. In versions 1.1.0 through 1.1.31 and 1.2.0 through 1.2.3, the standalone.py script provided in the ViewVC distribution can expose the contents of the host server's filesystem though a directory traversal-style...
CVE-2025-8034
Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...
CVE-2025-8030
Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1...
CVE-2025-36520
creationtimestamp| type| source ---|---|--- 2025-07-22 15:30:05+00:00| seen| https://infosec.place/objects/25421bc7-dc80-4f89-908d-46367e974cd4...
CVE-2024-13973
creationtimestamp| type| source ---|---|--- 2025-07-22 13:48:46+00:00| seen| https://poliverso.org/objects/0477a01e-605c14d2-887a4e63c671f474 2025-07-23 03:45:08+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lum46iuol22j 2025-07-24 04:33:21+00:00| seen|...
CVE-2025-7952
creationtimestamp| type| source ---|---|--- 2025-07-22 12:24:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114896867677018195...
CVE-2025-7900 Insecure Direct Object Reference in extension "femanager" (femanager)
The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0...
CVE-2025-46123
creationtimestamp| type| source ---|---|--- 2025-07-22 07:21:42+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...
CVE-2025-46121
creationtimestamp| type| source ---|---|--- 2025-07-22 07:21:42+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...
CVE-2025-54077
creationtimestamp| type| source ---|---|--- 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:44+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...
CVE-2025-6831
creationtimestamp| type| source ---|---|--- 2025-07-22 03:54:23+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:38+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...
CVE-2025-7952 TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection
A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. This vulnerability affects the function ckeckKeepAlive of the file wireless.so of the component MQTT Packet Handler. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been...