23691 matches found
CVE-2025-49146
A connection handling flaw was found in the pgjdbc connection driver in configurations that require channel binding. Connections created with authentication methods that should not allow channel binding permit connections to use channel binding. This flaw allows attackers to position themselves i...
CVE-2024-4200
creationtimestamp| type| source ---|---|--- 2025-06-11 20:03:02+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lre7adyihk2p...
CVE-2025-32465
creationtimestamp| type| source ---|---|--- 2025-06-11 19:51:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114666470506828107 2025-06-11 20:16:15+00:00| seen| Telegram/d4nUwsOBOdQROW01SEnvlRo6E92wcWw7AWRntwHKYeAQB4 2025-06-11 23:14:01+00:00| seen|...
CVE-2025-40912
A denial-of-service vulnerability has been discovered in the CPAN CryptX module. This flaw can be triggered by an attacker who is able to supply specially malformed Unicode input. Such malicious input could lead to a program crash, impacting the availability of any applications or services that...
CVE-2025-32466
The CVE-2025-32466 issue affects RSMediaGallery! for Joomla, specifically versions 1.7.4 through 2.1.7. The dashboard component allows unsanitized user input to be stored and rendered, enabling SQL injection and the execution of injected JavaScript in a user’s browser when they interact with craf...
CVE-2025-25032
creationtimestamp| type| source ---|---|--- 2025-06-11 18:35:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18122 2025-06-11 20:16:15+00:00| seen| Telegram/d4nUwsOBOdQROW01SEnvlRo6E92wcWw7AWRntwHKYeAQB4 2025-06-11 21:33:14+00:00| seen|...
CVE-2025-40912
CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode. CryptX embeds the tomcrypt library. The versions of that library in CryptX before 0.065 may be susceptible to CVE-2019-17362...
CVE-2025-49652
Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled...
CVE-2025-49150 Cursor Agent Potentially Leaks Information using JSON schema
Cursor is a code editor built for programming with AI. Prior to 0.51.0, by default, the setting json.schemaDownload.enable was set to True. This means that by writing a JSON file, an attacker can trigger an arbitrary HTTP GET request that does not require user confirmation. Since the Cursor Agent...
CVE-2025-40915
creationtimestamp| type| source ---|---|--- 2025-06-11 17:34:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18098 2025-06-11 20:16:04+00:00| published-proof-of-concept| Telegram/ph88y4G5oeScgD258CchMKrpr3BuS4k3KcSxkFOuLvPbbMI 2025-06-11 23:24:01+00:00| seen|...
CVE-2025-25032
IBM Cognos Analytics is affected by a memory-resource exhaustion denial-of-service vulnerability (CVE-2025-25032) impacting versions 11.2.0 through 12.0.4. An authenticated user can trigger a crafted request that exhausts memory, potentially impacting availability. Affected products/versions incl...
CVE-2025-4673
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
CVE-2025-22874
Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon...
CVE-2025-40915 Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens
Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens. That version of the module generates tokens as an MD5 of the process id, the current time, and a single call to the built-in rand function...
CVE-2025-48444
creationtimestamp| type| source ---|---|--- 2025-06-11 17:09:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdvk3wrex2s...
CVE-2025-32291
Unrestricted Upload of File with Dangerous Type vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Using Malicious Files.This issue affects SUMO Affiliates Pro: from n/a through 11.1.0...
CVE-2025-49297
Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.This issue affects Grill and Chow: from n/a through = 1.6...
CVE-2025-49279
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogvy blogvy allows PHP Local File Inclusion.This issue affects Blogvy: from n/a through = 1.0.7...