23602 matches found
CVE-2025-3806
A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3. Affected by this issue is some unknown functionality of the file /admin of the component Edit Profile Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. T...
CVE-2025-3803 Tenda W12/i24 httpd cgiSysScheduleRebootSet stack-based overflow
A vulnerability was found in Tenda W12 and i24 3.0.0.42887/3.0.0.53644. It has been rated as critical. This issue affects the function cgiSysScheduleRebootSet of the file /bin/httpd. The manipulation of the argument rebootDate leads to stack-based buffer overflow. The attack may be initiated...
CVE-2025-3798
creationtimestamp| type| source ---|---|--- 2025-04-19 11:02:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12581 2025-04-19 12:39:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln65qeca422v 2025-04-19 13:28:48+00:00| seen|...
CVE-2024-13926
creationtimestamp| type| source ---|---|--- 2025-04-19 06:59:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12576 2025-04-19 07:08:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln5laan57qu2 2025-04-19...
CVE-2024-13926
CVE-2024-13926 affects the WP-Syntax WordPress plugin (versions up to 1.2). The vulnerability arises from improper input handling that lets an attacker craft a post with a large number of tags, triggering a catastrophic backtracking issue in the regular expression engine and causing a DoS. The en...
BELL-CVE-2025-38240
Bulletin has no description...
BELL-CVE-2025-37860
Bulletin has no description...
CVE-2025-43894
creationtimestamp| type| source ---|---|--- 2025-04-19 03:59:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12565 2025-04-19 06:39:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln5jm4vnfk2d 2025-04-19 06:47:30+00:00| seen| https://t.me/cvedetector/23361...
CVE-2025-43893
creationtimestamp| type| source ---|---|--- 2025-04-19 03:59:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12564 2025-04-19 06:39:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln5jm4rj372r 2025-04-19 06:47:29+00:00| seen| https://t.me/cvedetector/23360...
CVE-2025-1457
creationtimestamp| type| source ---|---|--- 2025-04-19 03:59:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12561 2025-04-19 06:39:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln5jm5vbs72l 2025-04-19 06:47:28+00:00| seen|...
CVE-2022-47112
7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...
CVE-2025-43918
SSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a trusted TLS certificate may be issued for the domain name of a requester's email address, even when the requester does not otherwise establish administrative control of that...
CVE-2022-47112
7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...
CVE-2025-32953
z80pack is a mature emulator of multiple platforms with 8080 and Z80 CPU. In version 1.38 and prior, the makefile-ubuntu.yml workflow file uses actions/upload-artifact@v4 to upload the z80pack-ubuntu artifact. This artifact is a zip of the current directory, which includes the automatically...
CVE-2025-32953 z80pack Vulnerable to Exposure of the GITHUB_TOKEN in Workflow Run Artifact
z80pack is a mature emulator of multiple platforms with 8080 and Z80 CPU. In version 1.38 and prior, the makefile-ubuntu.yml workflow file uses actions/upload-artifact@v4 to upload the z80pack-ubuntu artifact. This artifact is a zip of the current directory, which includes the automatically...
CVE-2025-25984
creationtimestamp| type| source ---|---|--- 2025-04-18 20:33:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrfloto2r 2025-04-18 20:59:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12545 2025-04-18 23:16:05+00:00| seen|...
CVE-2025-25983
An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker to obtain sensitive information via the QE code based sharing component...
CVE-2024-57493
An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function...