23601 matches found
CVE-2025-27997
An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory...
CVE-2025-48249
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory EAN for WooCommerce ean-for-woocommerce allows Stored XSS.This issue affects EAN for WooCommerce: from n/a through = 5.4.6...
CVE-2025-48344
Cross-Site Request Forgery CSRF vulnerability in ed4becky Rootspersona rootspersona allows Cross Site Request Forgery.This issue affects Rootspersona: from n/a through = 3.7.5...
CVE-2025-5029
creationtimestamp| type| source ---|---|--- 2025-05-21 14:42:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17118 2025-05-21 17:18:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4amnoce2o...
CVE-2024-23337 jq has signed integer overflow in jv.c:jvp_array_write
jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue...
CVE-2024-42922
AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability...
CVE-2025-1419 XSS in Proget MDM
Input provided in comment section of Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack. This issue has been fixed in 2.17.5 version of Konsola Proget server part of the MDM suite...
CVE-2025-48417
creationtimestamp| type| source ---|---|--- 2025-05-21 12:45:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17110 2025-05-21 17:18:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4aonfjo2p...
CVE-2025-4217
The WP YouTube Video Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ibyoutube' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-48413 Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations
The /etc/passwd and /etc/shadow files reveal hard-coded password hashes for the operating system "root" user. The credentials are shipped with the update files. There is no option for deleting or changing their passwords for an enduser. An attacker can use the credentials to log into the device...
CVE-2025-37943
No description is available for this CVE...
CVE-2025-4217 WP YouTube Video Optimizer <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
The WP YouTube Video Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ibyoutube' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-37981
No description is available for this CVE...
CVE-2025-37899
creationtimestamp| type| source ---|---|--- 2025-05-21 08:47:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17104 2025-05-22 11:21:06+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lpqyqrgb452s 2025-05-22 11:21:41+00:00| seen|...
CVE-2025-37933
No description is available for this CVE...
CVE-2025-37980
No description is available for this CVE...
CVE-2025-37975
No description is available for this CVE...
CVE-2025-37966
No description is available for this CVE...