23691 matches found
CVE-2025-45988
Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bsSetCmd function...
Konsole: Code execution
Background Konsole is KDE's terminal emulator. Description Konsole supports loading URLs from the scheme handlers such as telnet://URL. This can be executed regardless of whether the telnet binary is available. It would fallback to bash in that case and execute arbitrary code. Impact Clicking a...
GLSA-202506-12 : sysstat: Arbitrary Code Execution
The remote host is affected by the vulnerability described in GLSA-202506-12 sysstat: Arbitrary Code Execution A vulnerability has been discovered in sysstat. Please review the CVE identifier referenced below for details. This CVE improves on an incomplete fix for CVE-2022-39377. Tenable has...
CVE-2025-6065
creationtimestamp| type| source ---|---|--- 2025-06-14 08:34:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18372 2025-06-14 09:32:18+00:00| seen| Telegram/C3UTwynst7UtmZY1a-TGsY39b-ZaceEinE1WZTPPvZFFkCA 2025-06-14 10:55:49+00:00| seen|...
CVE-2025-5589
CVE-2025-5589 affects StreamWeasels Kick Integration for WordPress; all versions up to 1.1.3 are vulnerable to Stored XSS via the status-classic-offline-text parameter due to insufficient input sanitization and output escaping. Exploitation requires Contributor+ authenticated access; successful a...
CVE-2025-50142
creationtimestamp| type| source ---|---|--- 2025-06-14 07:46:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkhhnht4w2r...
CVE-2025-5487
creationtimestamp| type| source ---|---|--- 2025-06-14 07:31:16+00:00| seen| Telegram/EBVgSt7wdJnZGFN9mjaTpNjNL5ZnfETU-XEnqrbYo0IQesw 2025-06-14 07:37:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18358 2025-06-14 09:21:45+00:00| seen|...
CVE-2025-50143
creationtimestamp| type| source ---|---|--- 2025-06-14 07:31:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkgms3l2q2u...
CVE-2025-3234
creationtimestamp| type| source ---|---|--- 2025-06-14 06:31:02+00:00| seen| Telegram/VYwOw1FgS2rdituN2tqfuXTl8dguJ6e02sBRJ2-I5qUtm7g 2025-06-14 06:35:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18357 2025-06-14 09:16:45+00:00| seen|...
CVE-2025-6059
CVE-2025-6059 affects the WordPress plugin Seraphinite Accelerator (versions up to and including 2.27.21). The vulnerability is a Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation in the function named OnAdminApi_CacheOpBegin. This flaw allows unauthenticated attacker...
CVE-2025-33108
CVE-2025-33108 affects IBM Backup, Recovery and Media Services for i versions 7.4 and 7.5. A BRMS program calling an unqualified library can allow a user with the capability to compile or restore a program to execute user-controlled code with host OS component access, enabling elevated privileges...
CVE-2025-24919
creationtimestamp| type| source ---|---|--- 2025-06-13 22:37:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18347 2025-06-13 23:14:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrjkueqdv52r 2025-08-06 13:05:54+00:00| seen|...
CVE-2025-6083
In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the ownerid filter. This issue may allow users to search data across the entire table instead of being restricted to their specific ownerid...
CVE-2025-49598 conda-forge-ci-setup Allows Arbitrary Code Execution via Insecure Version Parsing
conda-forge-ci-setup is a package installed by conda-forge each time a build is run on CI. The conda-forge-ci-setup-feedstock setup script is vulnerable due to the unsafe use of the eval function when parsing version information from a custom-formatted meta.yaml file. An attacker controlling...
CVE-2025-49597
handcraftedinthealps goodby-csv is a highly memory efficient, flexible and extendable open-source CSV import/export library. Prior to 1.4.3, goodby-csv could be used as part of a chain of methods that is exploitable when an insecure deserialization vulnerability exists in an application. This...
CVE-2025-49597 handcraftedinthealps goodby-csv Potential Gadget Chain allowing Remote Code Execution
handcraftedinthealps goodby-csv is a highly memory efficient, flexible and extendable open-source CSV import/export library. Prior to 1.4.3, goodby-csv could be used as part of a chain of methods that is exploitable when an insecure deserialization vulnerability exists in an application. This...
CVE-2025-49582
creationtimestamp| type| source ---|---|--- 2025-06-13 17:38:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18321 2025-06-13 18:01:53+00:00| published-proof-of-concept| Telegram/BdAJvjHyhFMVsKfZl02ptmuMNqjhviASPolesySVDo2DxO4 2025-06-13 21:42:18+00:00| seen|...
CVE-2024-38823
Salt's request server is vulnerable to replay attacks when not using a TLS encrypted transport. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to...
CVE-2025-48917
creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18319 2025-06-13 17:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriwp6kbhv25...