23602 matches found
CVE-2025-45250
creationtimestamp| type| source ---|---|--- 2025-05-06 14:08:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/35780 2025-05-06 18:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis6pk2k2j 2025-05-06 20:20:12+00:00| seen| https://t.me/cvedetector/24622...
CVE-2025-40622
CVE-2025-40622 affects TCMAN's GIM v11. An SQL injection in the username parameter of the GetLastDatePasswordChange endpoint allows unauthenticated attackers to read, update, or delete data in the database. The vulnerability is confirmed across multiple sources (Red Hat, NVD, CVE lists). No offic...
CVE-2025-21462
creationtimestamp| type| source ---|---|--- 2025-05-06 10:21:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loinx6outs2o 2025-05-06 12:48:36+00:00| seen| https://t.me/cvedetector/24582 2025-05-06 13:21:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15110...
CVE-2025-2011 Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter
The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...
CVE-2025-27248
creationtimestamp| type| source ---|---|--- 2025-05-06 09:21:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15075 2025-05-06 10:21:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loinx6hvhk2p 2025-05-06 12:48:22+00:00| seen|...
CVE-2025-27241
creationtimestamp| type| source ---|---|--- 2025-05-06 09:21:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15074 2025-05-06 10:21:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loinx5lfv72r 2025-05-06 12:48:19+00:00| seen|...
CVE-2025-4342
A vulnerability, which was classified as critical, has been found in D-Link DIR-600L up to 2.07B01. Affected by this issue is the function formEasySetupWizard3. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. This vulnerability only affects...
CVE-2025-27132
in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...
CVE-2025-21468
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer...
CVE-2025-21469
Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call...
CVE-2025-21475
Memory corruption while processing escape code, when DisplayId is passed with large unsigned value...
CVE-2025-22886
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...
CVE-2025-21462
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit...
CVE-2025-21467
Memory corruption while reading the FW response from the shared queue...
CVE-2024-49846
Memory corruption while decoding of OTA messages from T3448 IE...
CVE-2025-21453
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur...
CVE-2024-49847
Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE...
CVE-2024-49841
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling...