glibc: Buffer Overflow

Background glibc is a package that contains the GNU C library. Description A vulnerability has been discovered in glibc. Please review the CVE identifier referenced below for details. Impact Please review the referenced CVE identifier for details. Workaround There is no known workaround at this...

CVE-2025-44022

An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism...

CVE-2024-56524

Radware Cloud Web Application Firewall WAF before 2025-05-07 allows remote attackers to bypass firewall filters by adding a special character to the request...

CVE-2025-26846

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

CVE-2025-44022

CVE-2025-44022 affects vvveb CMS v1.0.6. A flaw in the Plugin mechanism allows remote execution of arbitrary code with no user interaction. CVSS v3.1 base score 9.8 (CRITICAL). Exploitation details are not provided in the connected documents; some sources suggest disabling the Plugin mechanism as...

EulerOS 2.0 SP10 : libtasn1 (EulerOS-SA-2025-1524)

According to the versions of the libtasn1 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn...

2025.1 IPU -Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing microcode updates and prescriptive guidance to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28956 Description: Exposure of Sensitive...

CVE-2025-4545

creationtimestamp| type| source ---|---|--- 2025-05-11 20:41:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lowcx4mgd22h 2025-05-12 00:13:32+00:00| seen| https://t.me/cvedetector/25054 2025-05-12 19:29:13+00:00| published-proof-of-concept|...

CVE-2024-39226

creationtimestamp| type| source ---|---|--- 2025-05-11 19:27:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114490845618304857...

CVE-2025-4542

creationtimestamp| type| source ---|---|--- 2025-05-11 18:49:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15932 2025-05-11 19:20:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3low6fe2rynu2 2025-05-11...

CVE-2025-4534

creationtimestamp| type| source ---|---|--- 2025-05-11 08:27:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15925 2025-05-11 08:37:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lov2hgmqfu24 2025-05-11 10:09:58+00:00| seen|...

CVE-2025-4531

CVE-2025-4531 affects Seeyon Zhiyuan OA Web Application System 8.1 SP2, specifically Beetl Template Handler’s EhrSalaryPayrollServiceImpl.postData. The payrollId argument is manipulated to cause code injection; attack vector is network with low complexity and no user interaction, and exploitation...

CVE-2025-46190

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...

CVE-2025-28200

Victure RX1800 ENV1.0.0r12110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address...

CVE-2025-29972

Server-Side Request Forgery SSRF in Azure allows an authorized attacker to perform spoofing over a network...

CVE-2025-33072

Improper access control in Azure allows an unauthorized attacker to disclose information over a network...

CVE-2025-47815

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from zipmemberreadall in zip-reader.c...

CVE-2025-47815

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from zipmemberreadall in zip-reader.c...

CVE-2025-47815

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from zipmemberreadall in zip-reader.c...

CVE-2025-4509

creationtimestamp| type| source ---|---|--- 2025-05-10 18:29:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15906 2025-05-10 20:30:23+00:00| published-proof-of-concept| Telegram/JOEmVrZPDW65BYYHlzxrjRSRQg3iXfNsb1k2QQNTi1kNxIw 2025-05-10 20:37:37+00:00| seen|...