CVE-2025-34090

A security bypass flaw was found in Google Chrome. A local low-privileged attacker can hijack the COM class identifier registration used by Chrome's elevation service and point it to a non-existent or malicious binary. When this hijack occurs, Chrome silently falls back to the legacy cookie...

CVE-2025-34090

creationtimestamp| type| source ---|---|--- 2025-07-02 20:31:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114785536770188510 2025-07-02 20:55:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsz3xhli4h2p...

CVE-2025-34090

Rejected reason: Neither filed by Chrome nor a valid security vulnerability...

CVE-2025-34078

A local privilege escalation vulnerability exists in NSClient++ 0.5.2.35 when both the web interface and ExternalScripts features are enabled. The configuration file nsclient.ini stores the administrative password in plaintext and is readable by local users. By extracting this password, an attack...

CVE-2025-32463 vulnerabilities

Vulnerabilities for packages: sudo...

CVE-2025-53493

creationtimestamp| type| source ---|---|--- 2025-07-02 17:49:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyrkl4e662p...

CVE-2025-38093

creationtimestamp| type| source ---|---|--- 2025-07-02 17:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyp2odabq2m...

CVE-2025-20309

creationtimestamp| type| source ---|---|--- 2025-07-02 16:40:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114784627483485422 2025-07-02 17:11:38+00:00| seen| https://t.me/TheDarkWebInformer/18723 2025-07-02 17:50:15+00:00| seen|...

CVE-2025-6942

creationtimestamp| type| source ---|---|--- 2025-07-02 16:19:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lsymew6qgmq2...

CVE-2025-34057

An information disclosure vulnerability exists in Ruijie NBR series routers known to affect NBR2000G, NBR1300G, and NBR1000 models via the /WEBVMS/LEVEL15/ endpoint. By crafting a specific POST request with modified Cookie headers and specially formatted parameters, an unauthenticated attacker ca...

CVE-2025-34069

creationtimestamp| type| source ---|---|--- 2025-07-02 13:56:11+00:00| seen| https://bsky.app/profile/potato.software/post/3lsyejtnlt62s 2025-07-02 14:36:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114784141478579135...

CVE-2024-8419

The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication...

CVE-2025-6437

creationtimestamp| type| source ---|---|--- 2025-07-02 09:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxvdy2lq42a...

CVE-2025-27021

The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool. This could allow sensitive information disclosure, denial of service, and privilege escalation by...

CVE-2025-27023 Improper Input Validation in Infinera G42

Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands. Details: The web interface based management of the Infinera G42 appliance enables the feature of executing a restricted set of...

CVE-2025-24331 Nokia Single RAN baseband OAM service extensive capabilities

The Single RAN baseband OAM service is intended to run as an unprivileged service. However, it initially starts with root privileges and assigns certain capabilities before dropping to an unprivileged level. The capabilities retained from the root period are considered extensive after the privile...

CVE-2025-6017 Rhacm: users with clusterreader role can see credentials from managed-clusters

A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to...

CVE-2025-6463 Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Form Submission Deletion

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'entrydeleteuploadfiles' function in all versions up to, and including, 1.44.2. This makes it possible for...

CVE-2025-6686

creationtimestamp| type| source ---|---|--- 2025-07-02 04:12:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20099 2025-07-02 09:53:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxwyfszry2m...

CVE-2025-6686 Magic Buttons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via magic-button Shortcode

The Magic Buttons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's magic-button shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...