CVE-2025-5269

CVE-2025-5269 is a memory-safety bug reported in Firefox ESR 128.10 and Thunderbird 128.10 that shows memory corruption and could potentially be exploited to run arbitrary code. Affected products: Firefox ESR < 128.11 and Thunderbird

CVE-2025-5266

Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks. This vulnerability was fixed in Firefox 139, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11...

CVE-2025-5265

Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.. Th...

CVE-2025-41649

An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices...

CVE-2025-41651 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches

Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise...

CVE-2024-38866

creationtimestamp| type| source ---|---|--- 2025-05-27 07:48:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17612 2025-05-27 08:02:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq57wv3xlfm2 2025-05-27...

CVE-2025-5146

A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 20250508 and classified as critical. This vulnerability affects the function passwdset of the file /usr/bin/routerd of the component HTTP Header Handler. The manipulation of the...

CVE-2024-47090 XSS via WYSIWYG editor

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...

CVE-2025-5202

A flaw was found in the Open Asset Import Library's Assimp HL1MDLLoader component. This vulnerability allows an out-of-bounds read via local manipulation of a malicious MDL file...

CVE-2025-5200

A flaw was found in the Open Asset Import Library Assimp. This vulnerability allows an out-of-bounds read via manipulation of an MDL file...

CVE-2025-5221

creationtimestamp| type| source ---|---|--- 2025-05-27 03:36:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4r3qonnpj2...

CVE-2025-4682

creationtimestamp| type| source ---|---|--- 2025-05-27 03:36:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4r3sr4bcy2...

CVE-2025-5225

creationtimestamp| type| source ---|---|--- 2025-05-27 03:36:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4r3isk3ij2...

CVE-2025-5226

A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/change-password.php. The manipulation of the argument oldpass leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-4682

CVE-2025-4682 covers the WordPress plugin Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates (vulnerability in the Slider and Post Carousel widgets). The root cause is insufficient input sanitization and output escaping, enabling stored XSS via HTML attributes. Affected: all v...

CVE-2025-5218

creationtimestamp| type| source ---|---|--- 2025-05-27 01:48:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17594 2025-05-27 03:36:31+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lq4r4gchxn52 2025-05-27...

CVE-2025-5219 FreeFloat FTP Server ASCII Command buffer overflow

A vulnerability has been found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component ASCII Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclose...

CVE-2025-5216

CVE-2025-5216 affects PHPGurukul Student Record System v3.20. The /login.php file processes the ID parameter without proper validation, leading to an SQL injection in remote attacker-controlled input. This vulnerability could allow an attacker to execute arbitrary SQL commands, potentially access...

CVE-2024-49196

CVE-2024-49196 concerns the GPU in Samsung Mobile Processor Exynos 1480 and 2400. The vulnerability is a type confusion in the GPU that can lead to a Denial of Service. Public exploit details are not provided in the connected documents. According to PT Security references, there is currently no i...

CVE-2025-5262

A double-free could have occurred in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 139 and Thunderbird 128.11...