23601 matches found
CVE-2025-4823
creationtimestamp| type| source ---|---|--- 2025-05-17 10:43:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpeeclujoq2t 2025-05-17 17:01:20+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpeza6ko5yb2...
CVE-2025-4824
A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possib...
CVE-2025-4824 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWsc buffer overflow
A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possib...
CVE-2025-4823
The CVE-2025-4823 entry concerns TOTOLINK A702R, A3002R and A3002RU devices (version 3.0.0-B20230809.1615) where the HTTP POST Request Handler’s /boafrm/formReflashClientTbl submit-url function is vulnerable to a buffer overflow. This is a network-exposed issue with low privileges required, no us...
CVE-2025-3812
WPBot Pro Wordpress Chatbot (WordPress)
CVE-2024-47893
creationtimestamp| type| source ---|---|--- 2025-05-17 01:35:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16766 2025-05-17 05:08:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpdrl2nsho2p...
WordPress Auto Prune Posts plugin < 3.0.0 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Auto Prune Posts versions 3.0.0...
CVE-2025-48027
The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver...
CVE-2025-4811
creationtimestamp| type| source ---|---|--- 2025-05-16 23:02:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpd55uegwk2t...
CVE-2025-4812
CVE-2025-4812 affects PHPGurukul Human Metapneumovirus Testing Management System v1.0. Multiple connected sources confirm a SQL injection vulnerability in the /profile.php file caused by unsafely handling the mobilenumber parameter, enabling remote exploitation and potential data disclosure. Root...
CVE-2025-48188
libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fillbuffer in data/encrypted-file.c to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer over-read...
CVE-2025-4809
creationtimestamp| type| source ---|---|--- 2025-05-16 20:35:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16757 2025-05-16 22:37:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpd3r52j5j2j...
CVE-2025-22233
CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter names. However, there are still cases where it is possible to bypass the disallowedFields checks. Affected Spring Products and Versions Spring Framework: 6.2...
CVE-2025-22233
CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter names. However, there are still cases where it is possible to bypass the disallowedFields checks. Affected Spring Products and Versions Spring Framework: 6.2...
CVE-2025-4802
CVE-2025-4802 affects the GNU C Library (glibc) versions 2.27–2.38. The issue is an untrusted LD_LIBRARY_PATH vulnerability that enables attacker-controlled loading of dynamically-linked libraries by statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlo...
CVE-2025-4806
CVE-2025-4806 affects SourceCodester/oretnom23 Stock Management System 1.0. The vulnerability is an SQL injection in the file path /admin/?page=back_order/view_bo caused by manipulation of the ID argument. It is exploitable remotely and publicly disclosed. Multiple connected sources confirm the i...
CVE-2025-4806 SourceCodester/oretnom23 Stock Management System view_bo sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=backorder/viewbo. The manipulation of the argument ID leads to sql injection. The attack may be...
CVE-2025-39491
creationtimestamp| type| source ---|---|--- 2025-05-16 18:37:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpcodolbbh2t...