CVE-2025-2851

A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mang...

CVE-2025-4003

creationtimestamp| type| source ---|---|--- 2025-04-28 06:10:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13659 2025-04-28 09:40:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxilwuz2s 2025-04-28 09:52:48+00:00| seen|...

CVE-2024-9771

CVE-2024-9771 affects the WP-Recall WordPress plugin (versions prior to 16.26.12). It enables Stored XSS by privileged users (e.g., Admin) due to improper sanitisation/escap​ing of settings, even when unfiltered_html is disallowed. Impact per available sources is stored XSS with low CVSS base of ...

CVE-2025-4002

CVE-2025-4002 affects RefindPlusRepo RefindPlus 0.14.2.AB. The issue is a NULL pointer dereference in the function GetDebugLogFile in the file Library/MemLogLib/BootLog.c . Exploitation requires local access . The patch identified as d2143a1e2deefddd9b105fb7160763c4f8d47ea2 is recommended to fix ...

CVE-2025-3999

creationtimestamp| type| source ---|---|--- 2025-04-28 04:10:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13654 2025-04-28 07:22:19+00:00| seen| https://t.me/cvedetector/23878 2025-04-28 07:40:50+00:00| seen|...

CVE-2025-4000

CVE-2025-4000 affects Seeyon Zhiyuan OA Web Application System 8.1 SP2. The vulnerability is an cross-site scripting in an unknown function of the file seeyonoptSeeyonA8ApacheJetspeedwebappsseeyonssoproxyjspssoproxy.jsp where manipulation of the Name argument enables remote exploitation. Public d...

CVE-2025-3999 Seeyon Zhiyuan OA Web Application System URL Parameter date.jsp cross site scripting

A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. This issue affects some unknown processing of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\common\js\addDate\date.jsp of the component URL Parameter Handler. Th...

CVE-2025-3997

creationtimestamp| type| source ---|---|--- 2025-04-28 03:10:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13653 2025-04-28 03:45:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lntu4654dw2b 2025-04-28 07:22:24+00:00| seen|...

CVE-2025-3993

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclos...

CVE-2025-31144

creationtimestamp| type| source ---|---|--- 2025-04-28 00:10:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13645 2025-04-28 03:11:28+00:00| seen| https://t.me/cvedetector/23870 2025-04-28 03:45:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lntu45sfq72y...

CVE-2023-35817

DevExpress before 23.1.3 allows AsyncDownloader SSRF...

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

CVE-2025-45947

The CVE-2025-45947 issue affects phpgurukul Online Banquet Booking System v1.2, where the /obbs/change-password.php file in the My Account - Change Password component can lead to arbitrary code execution due to improper handling. Documented impact is high, with potential full system compromise. M...

CVE-2025-27937

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory 'Path Traversal'. If exploited, an arbitrary file in the affected product may be obtained by a remote attacker who can log in to the product...

CVE-2025-3991 TOTOLINK N150RT formWdsEncrypt buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/formWdsEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-3990

A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of the file /boafrm/formVlan. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The...

CVE-2025-3990 TOTOLINK N150RT formVlan buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of the file /boafrm/formVlan. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The...

CVE-2025-3989 TOTOLINK N150RT formStaticDHCP buffer overflow

A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the argument Hostname leads to buffer overflow. The attack can be launched remotely. The exploit...

CVE-2025-46690

creationtimestamp| type| source ---|---|--- 2025-04-27 22:09:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13639 2025-04-28 01:31:06+00:00| seen| https://t.me/cvedetector/23863...

CVE-2025-3988

creationtimestamp| type| source ---|---|--- 2025-04-27 22:09:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13638 2025-04-27 22:10:57+00:00| seen| https://bsky.app/profile/potato.software/post/3lntbfrqsaj27 2025-04-27 23:48:51+00:00| seen|...