23592 matches found
CVE-2025-6393
A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request...
CVE-2025-5479
Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicio...
CVE-2025-6375
A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has bee...
CVE-2025-6393
TOTOLINK TOTOLINK A702R/A3002R/A3002RU/EX1200T devices (3.0.0-B20230809.1615 to 4.1.2cu.5232 B20210713) are affected by a vulnerability in the HTTP POST Request Handler, specifically in the unknown function of the file /boafrm/formIPv6Addr. The issue arises when the submit-url argument is manipul...
CVE-2025-5475 Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability
Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with t...
CVE-2025-52917
The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests...
CVE-2025-6367
creationtimestamp| type| source ---|---|--- 2025-06-20 22:47:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls34mb6m4d2a 2025-06-30 20:26:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...
CVE-2025-6370
creationtimestamp| type| source ---|---|--- 2025-06-20 22:44:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19084 2025-06-21 01:29:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls3fo2yiva2r 2025-06-30 20:26:56+00:00| seen|...
CVE-2025-6371
creationtimestamp| type| source ---|---|--- 2025-06-20 22:44:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19083 2025-06-21 01:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls3fwzgtqg2u 2025-06-30 20:26:56+00:00| seen|...
CVE-2025-48945
creationtimestamp| type| source ---|---|--- 2025-06-20 22:17:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls32xtf4sd2m 2025-06-23 10:52:45+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lsbg3gzerk2h...
CVE-2025-34022
creationtimestamp| type| source ---|---|--- 2025-06-20 22:04:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls32asqvqg2p 2025-06-21 21:02:20+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7no4eb2i 2025-06-22 01:29:32+00:00| seen|...
CVE-2025-25037
creationtimestamp| type| source ---|---|--- 2025-06-20 22:02:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls324ddez72m 2025-06-21 21:02:18+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7ngo6k2u 2025-06-23 20:47:21+00:00| published-proof-of-concept|...
CVE-2025-34024
creationtimestamp| type| source ---|---|--- 2025-06-20 21:50:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2zhacfsy23 2025-06-21 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7ntq752e 2025-06-30 20:27:00+00:00| seen|...
CVE-2025-6365
creationtimestamp| type| source ---|---|--- 2025-06-20 20:44:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19063 2025-06-20 21:58:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2zudqsab2m...
CVE-2025-48945
pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...
CVE-2025-34030
An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. The application fails to sanitize user-supplied input before using it in a system-level context. Remote, unauthenticated attackers can inject shell commands by appending them to t...
CVE-2025-4976
creationtimestamp| type| source ---|---|--- 2025-06-20 18:53:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114717202753199427 2025-07-24 06:41:24+00:00| seen| https://bsky.app/profile/potato.software/post/3luowin6wuo2y...
CVE-2025-34024
The CVE-2025-34024 affects Edimax EW-7438RPn firmware versions 1.13 and earlier, with an OS command injection via the /goform/mp endpoint’s command parameter in the mp.asp form handler. The root cause is improper handling of user-supplied input to that command parameter, enabling an authenticated...
CVE-2025-34021
The CVE-2025-34021 affects Selea Targa IP OCR-ANPR cameras (iZero, Targa 512, 504, Semplice, 704 TKM, 805, 710 INOX, 750, 704 ILB). Root cause: unvalidated JSON POST fields ipnotify_address and url used for image fetch/DNS checks, enabling an SSRF. Impact: remote unauthenticated attackers can for...