23601 matches found
CVE-2025-46746
creationtimestamp| type| source ---|---|--- 2025-05-12 17:32:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114496055573801981 2025-05-12 18:24:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15944 2025-05-12 18:26:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15963...
CVE-2025-46741 Improper Privilege Management
A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred...
WordPress BNS Twitter Follow Button plugin <= 0.3.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin BNS Twitter Follow Button versions = 0.3.8...
CVE-2025-47274
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol MCP servers. Due to the ordering of code used to start an MCP server container, versions of ToolHive prior to 0.0.33 inadvertently store secrets in the run config files which are used to restart...
CVE-2025-26846
An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...
CVE-2024-56523
Radware Cloud Web Application Firewall WAF before 2025-05-07 allows remote attackers to bypass firewall filters by placing random data in the HTTP request body when using the HTTP GET method...
CVE-2025-26846
An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...
CVE-2025-46718
sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges e.g. execution of a single command can list sudo privileges of other users using the -U flag. This vulnerability allows users with limited sudo privileges to enumerat...
CVE-2025-45835
A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENTLENGTH, causing the program to crash and...
CVE-2025-46729
julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v20230807 and prior to v20250511, cross-site scripting in the search function. v20250511 contains ...
CVE-2025-46729 phpDVDProfiler Cross-site Scripting vulnerability
julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v20230807 and prior to v20250511, cross-site scripting in the search function. v20250511 contains ...
CVE-2025-3649
creationtimestamp| type| source ---|---|--- 2025-05-12 08:42:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loxl7lf2e32l 2025-05-12 10:15:37+00:00| seen| https://t.me/cvedetector/25068 2025-05-12 18:24:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15937 2025-05-12...
CVE-2025-41393
Reflected cross-site scripting vulnerability exists in the laser printers and MFPs multifunction printers which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected produc...
CVE-2025-3649
The CVE-2025-3649 issue affects the LightPress Lightbox WordPress plugin (versions prior to 2.3.4). It arises because download links are not validated to ensure they point to non-Javascript URLs, enabling Stored XSS by users with at least the contributor role. Impact indicators from the sources l...
CVE-2023-53145
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdioremove due to race condition In btsdioprobe, the data-work is bound with btsdiowork. It will be started in btsdiosendframe. If the btsdioremove runs with a unfinished work, there...
CVE-2025-4549
creationtimestamp| type| source ---|---|--- 2025-05-12 00:41:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lowqelslzn2h 2025-05-12 01:00:37+00:00| published-proof-of-concept| Telegram/4kUQu822de1LPDuRg3vLxdeTbImmKLi3r7rk6aSaj04RHg 2025-05-12 01:53:54+00:00| seen|...
Unbreakable Enterprise kernel security update
5.15.0-308.179.6.2 - x86/bhi: Do not set BHIDISS in 32-bit mode Pawan Gupta Orabug: 37920681 - x86/bpf: Add IBHF call at end of classic BPF Daniel Sneddon Orabug: 37920681 - x86/bpf: Call branch history clearing sequence on exit Daniel Sneddon Orabug: 37920681 - selftest/x86/bugs: Add selftests f...
CVE-2025-44022
An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism...