23691 matches found
CVE-2015-0843
yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf...
CVE-2018-10831
creationtimestamp| type| source ---|---|--- 2025-06-26 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsjzkck2em2i 2026-06-19 12:53:13+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9f23ff3e-0e22-47c1-b47b-9697381af975...
CVE-2025-52904 File Browser: Command Execution not Limited to Scope
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions of the web application on the 2.x branch, all users have a scope assigned, and they only have access to the files within that scope. The...
CVE-2025-34046
creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19631 2025-06-26 20:42:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjyh66y642r 2025-06-27 21:02:22+00:00| seen|...
CVE-2025-6701
creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19627 2025-06-26 20:36:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjy4vrwjs2r...
CVE-2025-52887 cpp-httplib has unlimited number of http header fields, which causes memory leak
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields are passed in, the library does not limit the number of headers, and the memory associated with the headers will not be released when the connection is disconnected...
CVE-2025-52887
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields are passed in, the library does not limit the number of headers, and the memory associated with the headers will not be released when the connection is disconnected...
CVE-2025-6707
Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior ...
CVE-2025-6677
creationtimestamp| type| source ---|---|--- 2025-06-26 13:50:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19595 2025-06-26 18:29:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjqzpbnul2i...
CVE-2025-6624
creationtimestamp| type| source ---|---|--- 2025-06-26 10:35:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiwk3lf3n2r 2025-06-26 13:51:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19602...
CVE-2025-6212
creationtimestamp| type| source ---|---|--- 2025-06-26 09:50:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19583 2025-06-26 12:34:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj56eibgv2r...
CVE-2025-5459
A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0...
CVE-2025-6290
creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19556 2025-06-26 06:24:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiiiamt2w2v...
CVE-2025-5929
CVE-2025-5929 – The Countdown WordPress plugin is reported to have a Stored Cross-Site Scripting vulnerability via the clientId parameter in versions up to and including 2.0.1. The vulnerability requires authentication at Contributor level or higher, and could allow an attacker to inject scripts ...
CVE-2024-11584
cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands...
CVE-2024-52928
Arc before 1.26.1 on Windows has a bypass issue in the site settings that allows websites with previously granted permissions to add new permissions when the user clicks anywhere on the website...
CVE-2025-49550
creationtimestamp| type| source ---|---|--- 2025-06-25 17:52:47+00:00| seen| https://bsky.app/profile/potato.software/post/3lsh6ihfv5e2h 2025-06-25 18:51:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19511...
CVE-2025-6444
The CVE-2025-6444 entry covers a vulnerability in ServiceStack where the GetErrorResponse method in ServiceStack.Text improperly validates user-supplied data, enabling NTLM credential relay. The flaw derives from a type confusion condition caused by insufficient input validation, allowing a remot...
CVE-2025-52890
Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus versions 6.12 and 6.13generates nftables rules that partially bypass security options security.macfiltering, security.ipv4filtering and security.ipv6filtering. This can lead to ARP...