23593 matches found
CVE-2025-49597 handcraftedinthealps goodby-csv Potential Gadget Chain allowing Remote Code Execution
handcraftedinthealps goodby-csv is a highly memory efficient, flexible and extendable open-source CSV import/export library. Prior to 1.4.3, goodby-csv could be used as part of a chain of methods that is exploitable when an insecure deserialization vulnerability exists in an application. This...
CVE-2025-49582
creationtimestamp| type| source ---|---|--- 2025-06-13 17:38:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18321 2025-06-13 18:01:53+00:00| published-proof-of-concept| Telegram/BdAJvjHyhFMVsKfZl02ptmuMNqjhviASPolesySVDo2DxO4 2025-06-13 21:42:18+00:00| seen|...
CVE-2024-38823
Salt's request server is vulnerable to replay attacks when not using a TLS encrypted transport. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to...
CVE-2025-48917
creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18319 2025-06-13 17:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriwp6kbhv25...
CVE-2025-48916
Missing Authorization vulnerability in Drupal Bookable Calendar allows Forceful Browsing.This issue affects Bookable Calendar: from 0.0.0 before 2.2.13...
CVE-2025-36631
creationtimestamp| type| source ---|---|--- 2025-06-13 16:08:29+00:00| seen| Telegram/Fw0XBy1WaCOjxg2mWHXnG8lWV81E0IbizYC1ykRJG5IGg 2025-06-13 17:18:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriwxsddv523 2025-06-16 14:02:08+00:00| seen|...
CVE-2025-49580 XWiki allows privilege escalation through link refactoring
XWiki is a generic wiki platform. From 8.2 and 7.4.5 until 17.1.0-rc-1, 16.10.4, and 16.4.7, pages can gain script or programming rights when they contain a link and the target of the link is renamed or moved. This might lead to execution of scripts contained in xobjects that should have never be...
CVE-2025-6052 Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring
A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be writte...
CVE-2025-48917 EU Cookie Compliance (GDPR Compliance) - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-072
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal EU Cookie Compliance GDPR Compliance allows Cross-Site Scripting XSS.This issue affects EU Cookie Compliance GDPR Compliance: from 0.0.0 before 1.26.0...
CVE-2025-48918 Simple Klaro - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-071
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Simple Klaro allows Cross-Site Scripting XSS.This issue affects Simple Klaro: from 0.0.0 before 1.10.0...
CVE-2025-28382
creationtimestamp| type| source ---|---|--- 2025-06-13 15:25:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114676749186057555 2025-06-13 17:05:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriwb7srzh2p...
CVE-2025-6030
CVE-2025-6030 concerns the Cyclone Matrix TRF Smart Keyless Entry System’s Key Fob Transmitter, where the use of fixed learning codes enables a replay attack. The issue affects Cyclone Matrix TRF-based keyless systems and was demonstrated on a 2024 Kia Soluto, with reports of attacks on other Kia...
CVE-2025-45988
Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bsSetCmd function...
CVE-2024-38824
Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory...
CVE-2025-29756
SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser. The MQTT server however did not have sufficient restrictions in place to limit the topics that a user could subscribe to. While t...
CVE-2025-5923
creationtimestamp| type| source ---|---|--- 2025-06-13 07:33:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18280 2025-06-13 11:49:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrielodf5g2m...
CVE-2025-22236
creationtimestamp| type| source ---|---|--- 2025-06-13 07:28:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhvvbpjhex2 2025-06-13 07:33:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18277 2025-06-13 07:34:25+00:00| seen|...
CVE-2025-45786
creationtimestamp| type| source ---|---|--- 2025-06-13 07:24:40+00:00| seen| https://gist.github.com/0xKunAlx0/a80bc7ec5acb2f19daa36257fedbcf11 2025-06-18 14:41:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18751 2025-06-18 15:31:20+00:00| published-proof-of-concept|...
