23603 matches found
CVE-2025-32385
creationtimestamp| type| source ---|---|--- 2025-04-16 02:43:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmvkzrfzye2z 2025-04-16 03:29:27+00:00| seen| https://t.me/cvedetector/23035...
CVE-2025-30100
creationtimestamp| type| source ---|---|--- 2025-04-16 02:38:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114345321315173984 2025-04-16 02:43:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmvkzrjbve2v 2025-04-16 05:59:56+00:00| seen| https://t.me/cvedetector/230...
CVE-2025-43704
Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authentication to a Dell Isilon OneFS server...
CVE-2024-58248
nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards...
CVE-2024-58248
CVE-2024-58248 affects nopCommerce prior to 4.80.0 (public notes reference up to 4.90.1) where order placement lacks locking, enabling a race condition that can allow duplicate gift card redemption. Public advisories (NVD/Red Hat/OSV/Snyk) confirm the issue and cite a remediation to upgrade to ve...
CVE-2024-55371
Wallos = 2.38.2 has a file upload vulnerability in the restore backup function, which allows authenticated users to restore backups by uploading a ZIP file. The contents of the ZIP file are extracted on the server. This functionality enables an authenticated attacker being an administrator is not...
CVE-2024-55372
CVE-2024-55372 concerns Wallos
CVE-2025-32433
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor...
CVE-2025-30215
NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system. In versions starting from 2.2.0 but prior to 2.10.27 and 2.11.1, the management of JetStream assets happens with messages in the $JS. subject namespace in the system account; this is partially expose...
CVE-2025-29722
creationtimestamp| type| source ---|---|--- 2025-04-15 23:00:05+00:00| published-proof-of-concept| Telegram/EUjFtpfWmQCCiI3QE6k9fNf8U9NSLKRgk3MQ4WNVb8t4qx0 2025-04-17 17:57:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12300 2025-04-17 18:54:29+00:00| seen|...
CVE-2025-32435
creationtimestamp| type| source ---|---|--- 2025-04-15 22:55:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11944 2025-04-16 02:43:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmvkzr742z2b 2025-04-16 03:29:34+00:00| seen|...
CVE-2025-32923
creationtimestamp| type| source ---|---|--- 2025-04-15 22:44:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5o3ufyy2g 2025-04-15 22:45:49+00:00| seen| https://bsky.app/profile/potato.software/post/3lmv5r3a3mx2c 2025-04-15 22:56:02+00:00| published-proof-of-concept|...
CVE-2025-32733
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...
CVE-2025-22900
creationtimestamp| type| source ---|---|--- 2025-04-15 22:28:12+00:00| seen| https://t.me/cvedetector/23005 2025-04-16 16:48:21+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114348661119837676...
CVE-2025-30257
Unauthenticated attackers can retrieve serial number of smart meters associated to a specific user account...
CVE-2025-26927
Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes AI Hub aihub allows Upload a Web Shell to a Web Server.This issue affects AI Hub: from n/a through = 1.3.7...