23691 matches found
CVE-2025-6524
creationtimestamp| type| source ---|---|--- 2025-06-24 00:31:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscttcfsai2q 2025-06-24 17:49:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19387...
CVE-2025-32977
Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...
WordPress Conference Scheduler plugin <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via className Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Conference Scheduler versions = 2.5.1...
CVE-2025-49144
creationtimestamp| type| source ---|---|--- 2025-06-23 20:32:26+00:00| published-proof-of-concept| Telegram/O2eh7gLrpcZbONgN5-OX68m3ZbpQKWlr4HE62LMc1M7414 2025-06-23 20:33:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscgkgjxoj25 2025-06-24 02:21:49+00:00| seen|...
CVE-2025-6547
creationtimestamp| type| source ---|---|--- 2025-06-23 20:28:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscgbi44ax2r 2025-06-23 20:32:26+00:00| published-proof-of-concept| Telegram/O2eh7gLrpcZbONgN5-OX68m3ZbpQKWlr4HE62LMc1M7414...
CVE-2025-44528
creationtimestamp| type| source ---|---|--- 2025-06-23 19:47:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19256 2025-06-24 00:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsctzzcq5o2i...
CVE-2025-50348
creationtimestamp| type| source ---|---|--- 2025-06-23 18:50:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19245 2025-06-23 20:09:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscf6xd55325...
CVE-2025-49126
Visionatrix is affected by a Reflected XSS in versions 1.5.0–2.5.0 (fixed in 2.5.1) via the "/docs/flows" endpoint. The root cause is the use of FastAPI’s get_swagger_ui_html without encoding or sanitizing user-controlled arguments, which is used to render the swagger docs. The vulnerability enab...
CVE-2025-52968
creationtimestamp| type| source ---|---|--- 2025-06-23 16:35:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsbza7bn4h2s...
CVE-2025-52967
gatewayproxyhandler in MLflow before 3.1.0 lacks gatewaypath validation...
CVE-2025-52877
creationtimestamp| type| source ---|---|--- 2025-06-23 14:45:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19209 2025-06-23 16:55:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsc2dywpdv2r...
CVE-2025-48700
creationtimestamp| type| source ---|---|--- 2025-06-23 14:45:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19204 2025-06-23 16:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsbxv257qz2r 2026-04-20 20:00:03+00:00| exploited|...
CVE-2025-2172
Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames...
CVE-2025-52920
Innoshop through 0.4.1 allows Insecure Direct Object Reference IDOR at multiple places within the frontend shop. Anyone can create a customer account and easily exploit these. Successful exploitation results in disclosure of the PII of other customers and the deletion of their reviews of products...
CVE-2025-52921
creationtimestamp| type| source ---|---|--- 2025-06-23 12:01:46+00:00| published-proof-of-concept| Telegram/HXBqyCxgvMHLtEfnDSGBXVUAF1NVCNReOpP5SUo5lvs4FM4 2025-06-23 12:47:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19197 2025-06-23 15:19:12+00:00| seen|...
CVE-2022-49988
REJECTED CVE In the Linux kernel, the following vulnerability has been resolved: binderalloc: add missing mmaplock calls when using the VMA...
CVE-2025-52935
The CVE-2025-52935 entry concerns an Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly, specifically in the src/redis/lua/struct modules (lua_struct.C). Affected versions are dragonfly 1.28.18 through 1.30.1. The issue is confirmed across multiple sources (e.g., PT-2025-26585)...
CVE-2025-29646
An issue in upf in open5gs 2.7.2 and earlier allows a remote attacker to cause a Denial of Service via a crafted PFCP SessionEstablishmentRequest packet with restoration indication = true and teid = 0 or teid = ogspfcppdrteidpool.size...
CVE-2025-50010
Missing Authorization vulnerability in Zapier Zapier for WordPress zapier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zapier for WordPress: from n/a through = 1.5.2...