23602 matches found
CVE-2024-13307
creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13200 2025-04-24 13:03:57+00:00| seen| https://t.me/cvedetector/23669 2025-04-24 14:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkvnu6k242s...
CVE-2025-3793
creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13198 2025-04-24 13:03:37+00:00| seen| https://t.me/cvedetector/23655 2025-04-24 13:19:23+00:00| seen|...
CVE-2025-1284 Woocommerce Automatic Order Printing | ( Formerly WooCommerce Google Cloud Print) <= 4.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Order Information Disclosure
The Woocommerce Automatic Order Printing | Formerly WooCommerce Google Cloud Print plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1 via the xcwooprinterpreview AJAX action due to missing validation on a user controlled key. This make...
CVE-2025-1908
Removed by vendor...
CVE-2025-3761 My Tickets – Accessible Event Ticketing <= 2.0.16 - Authenticated (Subscriber+) Privilege Escalation
The My Tickets – Accessible Event Ticketing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.16. This is due to the mtsaveprofile function not appropriately restricting access to unauthorized users to update roles. This makes it possible for...
CVE-2025-2558 The Wound <= 0.0.1 - Unauthenticated LFI
The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary file from the server...
CVE-2025-46374
creationtimestamp| type| source ---|---|--- 2025-04-24 05:15:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxadbu442b 2025-04-24 07:12:34+00:00| seen| https://t.me/cvedetector/23635...
CVE-2025-46375
creationtimestamp| type| source ---|---|--- 2025-04-24 05:15:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxadfboe2t 2025-04-24 07:12:38+00:00| seen| https://t.me/cvedetector/23636...
CVE-2025-46393
A flaw was found the inImageMagick package. In multispectral MIFF image processing in ImageMagick, packetsize is mishandled. This issue is related to the rendering of all channels in an arbitrary order. Mitigation Mitigation for this issue is either not available or the currently available option...
CVE-2025-1976 Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6
Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6...
CVE-2025-46419
Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet...
CVE-2025-27580
NIH BRICS aka Biomedical Research Informatics Computing System through 14.0.0-67 generates predictable tokens that depend on username, time, and the fixed 7Dl9dj- string and thus allows unauthenticated users with a Common Access Card CAC to escalate privileges and compromise any account, includin...
CVE-2025-27580
creationtimestamp| type| source ---|---|--- 2025-04-24 00:05:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13165 2025-04-24 01:14:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjsst3da2h 2025-04-24 04:42:06+00:00| seen|...
CVE-2025-46419
Westermo WeOS 5.x (versions 5 through 5.23.0) is affected. When IPSec is configured, processing of a malformed ESP packet can trigger an immediate device reboot, constituting a denial-of-service condition. The vulnerability’s CVSSv3.1 base metrics indicate NETWORK access, high attack complexity, ...
CVE-2025-46417
The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.getservercertificate can exfiltrate data via DNS after deserialization...
Debian: Security Advisory (DLA-4135-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-29568
A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0. The issue affects some unknown features in the file /Scheduling/pages/classsched.php. Manipulating the class parameter can lead to cross-site scripting XSS...
CVE-2025-46397
A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezierspline function...
