23592 matches found
CVE-2025-34033
creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:37+00:00| published-proof-of-concept| Telegram/FWQuDCGkB48s3X-ytLLRs8ob9H-1PG5fjzb6WWUrU09iwg 2025-06-24 03:48:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19302 2025-06-24 04:36:14+00:00| seen|...
CVE-2025-34034
creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:28+00:00| published-proof-of-concept| Telegram/NM29ZOqpmG-Y64LGkIifGuVrcqzQc0JYrAesLRC81UHf4 2025-06-24 03:48:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19303 2025-06-24 04:18:50+00:00| seen|...
CVE-2025-34033
An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...
CVE-2025-6533
creationtimestamp| type| source ---|---|--- 2025-06-24 00:46:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19276 2025-06-24 04:19:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdalvamqs2i...
CVE-2025-6524
creationtimestamp| type| source ---|---|--- 2025-06-24 00:31:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscttcfsai2q 2025-06-24 17:49:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19387...
CVE-2025-32977
Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...
WordPress Conference Scheduler plugin <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via className Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Conference Scheduler versions = 2.5.1...
CVE-2025-49144
creationtimestamp| type| source ---|---|--- 2025-06-23 20:32:26+00:00| published-proof-of-concept| Telegram/O2eh7gLrpcZbONgN5-OX68m3ZbpQKWlr4HE62LMc1M7414 2025-06-23 20:33:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscgkgjxoj25 2025-06-24 02:21:49+00:00| seen|...
CVE-2025-6547
creationtimestamp| type| source ---|---|--- 2025-06-23 20:28:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscgbi44ax2r 2025-06-23 20:32:26+00:00| published-proof-of-concept| Telegram/O2eh7gLrpcZbONgN5-OX68m3ZbpQKWlr4HE62LMc1M7414...
CVE-2025-44528
creationtimestamp| type| source ---|---|--- 2025-06-23 19:47:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19256 2025-06-24 00:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsctzzcq5o2i...
CVE-2025-50348
creationtimestamp| type| source ---|---|--- 2025-06-23 18:50:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19245 2025-06-23 20:09:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscf6xd55325...
CVE-2025-49126
Visionatrix is affected by a Reflected XSS in versions 1.5.0–2.5.0 (fixed in 2.5.1) via the "/docs/flows" endpoint. The root cause is the use of FastAPI’s get_swagger_ui_html without encoding or sanitizing user-controlled arguments, which is used to render the swagger docs. The vulnerability enab...
CVE-2025-52968
creationtimestamp| type| source ---|---|--- 2025-06-23 16:35:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsbza7bn4h2s...
CVE-2025-52967
gatewayproxyhandler in MLflow before 3.1.0 lacks gatewaypath validation...
CVE-2025-52877
creationtimestamp| type| source ---|---|--- 2025-06-23 14:45:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19209 2025-06-23 16:55:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsc2dywpdv2r...
CVE-2025-48700
creationtimestamp| type| source ---|---|--- 2025-06-23 14:45:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19204 2025-06-23 16:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsbxv257qz2r 2026-04-20 20:00:03+00:00| exploited|...
CVE-2025-2172
Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames...
CVE-2025-52920
Innoshop through 0.4.1 allows Insecure Direct Object Reference IDOR at multiple places within the frontend shop. Anyone can create a customer account and easily exploit these. Successful exploitation results in disclosure of the PII of other customers and the deletion of their reviews of products...
CVE-2025-52921
creationtimestamp| type| source ---|---|--- 2025-06-23 12:01:46+00:00| published-proof-of-concept| Telegram/HXBqyCxgvMHLtEfnDSGBXVUAF1NVCNReOpP5SUo5lvs4FM4 2025-06-23 12:47:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19197 2025-06-23 15:19:12+00:00| seen|...