23596 matches found
CVE-2025-48754
In the memorypages crate 0.1.0 for Rust, division by zero can occur...
CVE-2025-48754
creationtimestamp| type| source ---|---|--- 2025-05-24 02:54:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpv5dipt4uj2 2025-05-24 12:47:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114562881718704001...
CVE-2025-3869
CVE-2025-3869 affects the WordPress plugin 4stats (versions up to and including 2.0.9). The underlying issue is a missing/incorrect nonce validation on stats/stats.php, enabling CSRF to trigger actions that update settings and inject web scripts via forged requests. This can allow unauthenticated...
CVE-2025-32813
An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur...
CVE-2024-41198
An issue in Ocuco Innovation - REPORTS.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet...
CVE-2025-48755
In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST zero-sized type...
CVE-2025-48755
CVE-2025-48755 affects the spiral-rs crate (Rust) version 0.2.0, where an allocation can be attempted for a zero-sized type (ZST). The root cause, as described in the provided sources, is an allocation operation involving ZSTs within spiral-rs. The CVSSv3.1 metrics from NVD indicate a critical ba...
CVE-2025-48756
The CVE-2025-48756 entry concerns the scsir crate (Rust) version 0.2.0, where the function group_number can overflow when a hardware device expects a small number of bits (for example 5) to represent the group number. This is the stated root cause and aligns with the NVD description. The availabl...
CVE-2025-48753
In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock...
CVE-2025-48756
In groupnumber in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits e.g., 5 bits for group number...
CVE-2025-48754
CVE-2025-48754 affects the memory_pages crate 0.1.0 for Rust, where a division by zero can occur. Public sources corroborate the issue (NVD CVSS 3.1 base score 7.5 HIGH; GHSA/Red Hat entries describe the same division-by-zero problem). The connected documents do not provide a concrete patch versi...
CVE-2025-48751
CVE-2025-48751 involves the Rust crate process_lock version 0.1.0. The available documents describe a race condition in the unlock pathway that can lead to data races and potentially unpredictable behavior. Concrete details across sources confirm the affected component (the unlock logic in the pr...
CVE-2019-20504
creationtimestamp| type| source ---|---|--- 2025-05-23 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lpujow7ycr2h 2026-06-23 14:06:20+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c6bd9cdf-84ce-4fb1-849f-59fdcb553802...
CVE-2018-17283
creationtimestamp| type| source ---|---|--- 2025-05-23 21:02:18+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lpujovygse2i 2026-06-23 14:06:22+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bf2ef299-6554-4895-9744-bbe9eb35c0d9...
CVE-2025-48739
creationtimestamp| type| source ---|---|--- 2025-05-23 20:48:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17465 2025-05-23 21:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpukrtewhp2w...
CVE-2025-48739
A Server-Side Request Forgery SSRF vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows remote authenticated attackers with admin permissions allowing them to access specific API endpoints to manipulate URLs to direct...
CVE-2024-51102
creationtimestamp| type| source ---|---|--- 2025-05-23 19:45:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17456 2025-05-23 21:44:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpum32zpis27...
CVE-2025-44998
A stored cross-site scripting XSS vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter...