23595 matches found
CVE-2025-1334
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system...
CVE-2025-5663
creationtimestamp| type| source ---|---|--- 2025-06-05 14:39:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqukeulmevp2 2025-06-05 15:01:09+00:00| published-proof-of-concept| Telegram/Zv-pdrcTYlIiMzVhdVtgLNi1tORwiJJY7nTtoW4bJRg7PA...
CVE-2025-47827
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...
CVE-2025-5382
Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user management permission to remove or change administrators MFA...
CVE-2025-5658
creationtimestamp| type| source ---|---|--- 2025-06-05 13:07:19+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lquf5626ucp2 2025-06-05 15:01:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqullw7j262m...
CVE-2025-5660 PHPGurukul Complaint Management System register-complaint.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 2.0. Affected by this issue is some unknown functionality of the file /user/register-complaint.php. The manipulation of the argument noc leads to sql injection. The attack may be launched...
CVE-2011-10007
CVE-2011-10007 : File::Find::Rule (Perl) up to version 0.34 is vulnerable to Arbitrary Code Execution when grep() processes a crafted filename. The issue arises from using the 2-argument form of open(), permitting an attacker-controlled filename to supply the MODE parameter, turning the filename ...
CVE-2025-5655
creationtimestamp| type| source ---|---|--- 2025-06-05 11:49:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquatmxb45n2 2025-06-05 14:43:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquklmehdr2e 2026-01-18...
CVE-2025-5654
creationtimestamp| type| source ---|---|--- 2025-06-05 11:45:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquajxgclz42...
CVE-2025-5341 Forminator <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id' and 'data-size’ parameters in all versions up to, and including, 1.44.1 due to insufficient input sanitization and output escaping. This makes it...
CVE-2025-5701 HyperComments <= 1.2.2 - Unauthenticated (Subscriber+) Arbitrary Options Update
The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to...
CVE-2025-5654
CVE-2025-5654 affects PHPGurukul Complaint Management System 2.0, specifically the /admin/edit-state.php functionality. The vulnerability is a SQL injection caused by unsafely handling the description parameter, which can be exploited remotely and has been publicly disclosed. Impact is high (pote...
CVE-2025-5652
A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/between-date-complaintreport.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the...
CVE-2025-5650
creationtimestamp| type| source ---|---|--- 2025-06-05 09:47:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqtzxzlkj3e2 2025-06-05 10:00:21+00:00| published-proof-of-concept| Telegram/3YNjRMKD6HlTeyyMpG1pDCH9PK3J81nDUtd1rzQo-oVfNM...
CVE-2025-1793
creationtimestamp| type| source ---|---|--- 2025-06-05 08:43:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqtwhbgxgz2k 2025-06-05 12:03:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114630656268628342 2025-06-05 21:08:11+00:00| seen|...
CVE-2025-5646
A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function rconsrainbowfree in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on...
CVE-2025-5642
creationtimestamp| type| source ---|---|--- 2025-06-05 07:55:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqttq2ovsvs2 2025-06-05 10:57:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqu5xrlszi2r...
CVE-2025-5641
creationtimestamp| type| source ---|---|--- 2025-06-05 07:55:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqttpxv7w742 2025-06-05 11:07:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqu6jowuv425...
CVE-2025-21479
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands...
CVE-2025-5683
creationtimestamp| type| source ---|---|--- 2025-06-05 06:49:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqtq32jgfpq2 2025-06-05 08:50:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqtwtxi2w72r 2025-07-15...