23691 matches found
CVE-2025-52993
A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user e.g., nixbld or guixbuild. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before...
CVE-2025-53391
creationtimestamp| type| source ---|---|--- 2025-06-28 21:55:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19832 2025-06-28 23:29:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lspcp7zaes2i 2025-06-30 13:59:29+00:00| seen|...
CVE-2025-6821
creationtimestamp| type| source ---|---|--- 2025-06-28 18:54:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19828 2025-06-28 22:20:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsp6trlcnk2p...
CVE-2025-6822
creationtimestamp| type| source ---|---|--- 2025-06-28 18:54:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19826 2025-06-28 22:35:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsp7omuxwy2a...
CVE-2023-28910
creationtimestamp| type| source ---|---|--- 2025-06-28 15:55:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19819 2025-06-28 18:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsot2bdhed2i 2025-06-29 02:27:34+00:00| seen|...
CVE-2023-28903
creationtimestamp| type| source ---|---|--- 2025-06-28 15:55:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19812 2025-06-28 18:19:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsorfb4q6f2u...
CVE-2025-6818
creationtimestamp| type| source ---|---|--- 2025-06-28 15:53:53+00:00| seen| https://bsky.app/profile/potato.software/post/3lsojalx6jx2h 2025-06-28 15:55:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19823 2025-06-28 18:24:53+00:00| seen|...
CVE-2025-6817
creationtimestamp| type| source ---|---|--- 2025-06-28 11:54:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19809 2025-06-28 14:19:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsodyp3k352k...
CVE-2025-3771
A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files, which can potentially cause a system crash. This was achieved by adding a malicious entry to the registry under the...
CVE-2025-6816
A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5Ofsinfoencode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to...
CVE-2025-5937
creationtimestamp| type| source ---|---|--- 2025-06-28 07:51:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19808 2025-06-28 10:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnyav4pla2s...
CVE-2025-53380
creationtimestamp| type| source ---|---|--- 2025-06-28 04:39:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsndkghnuv2p...
CVE-2025-6776
A vulnerability classified as critical was found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This vulnerability affects the function Upload of the file app/plugins/oss/app/controller.py of the component File Upload. The manipulation of the argument image leads to path traversal. The attack can b...
CVE-2025-52207
creationtimestamp| type| source ---|---|--- 2025-06-27 19:40:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmfg7nrju25 2025-09-19 21:02:38+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz7r6tpujy23 2025-12-02 21:02:37+00:00| seen|...
CVE-2025-53093 TabberNeue vulnerable to Stored XSS through wikitext
TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the tag. Version 3.1.1 contains a patch for the bug...
CVE-2025-52207
PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory...
CVE-2025-46708
Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU...
CVE-2025-53091
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in version 3.3.3 the almox parameter of the /controle/getProdutosPorAlmox.php endpoint. This issue allows any unauthenticated...