6716 matches found
CVE-2025-36027
creationtimestamp| type| source ---|---|--- 2025-06-28 01:51:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19798 2025-06-28 04:56:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnej3wzlg2i...
CVE-2025-6776 xiaoyunjie openvpn-cms-flask File Upload controller.py upload path traversal
A vulnerability classified as critical was found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This vulnerability affects the function Upload of the file app/plugins/oss/app/controller.py of the component File Upload. The manipulation of the argument image leads to path traversal. The attack can b...
CVE-2025-6772
creationtimestamp| type| source ---|---|--- 2025-06-27 18:51:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19777 2025-06-27 20:35:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmiin3m4723...
CVE-2025-6678
Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. Authentication is not...
CVE-2025-53325
creationtimestamp| type| source ---|---|--- 2025-06-27 17:56:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19769 2025-06-27 18:47:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmcipvemw2r...
CVE-2025-46707
CVE-2025-46707 concerns Imagination Technologies graphics stack (PowerVR-GPU) where software in a Guest VM can override the firmware state and gain access to the GPU. The base CVSS shows it is a local issue with low privileges and no user interaction, scoped to change in confidentiality/integrity...
CVE-2025-53314
creationtimestamp| type| source ---|---|--- 2025-06-27 15:34:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lslxppd2ig2a 2025-06-27 17:56:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19765...
CVE-2025-53327 WordPress Aioseo Multibyte Descriptions plugin <= 0.0.6 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in ruimashita Aioseo Multibyte Descriptions aioseo-multibyte-descriptions allows Cross Site Request Forgery.This issue affects Aioseo Multibyte Descriptions: from n/a through = 0.0.6...
CVE-2025-53274 WordPress WP Permalink Translator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Hossin Asaadi WP Permalink Translator wp-permalink-translator allows Stored XSS.This issue affects WP Permalink Translator: from n/a through = 1.7.6...
CVE-2025-53265 WordPress Virusdie plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Virusdie Virusdie virusdie allows Cross Site Request Forgery.This issue affects Virusdie: from n/a through = 1.1.3...
CVE-2025-28947 WordPress MBStore - Digital WooCommerce WordPress Theme <= 2.3 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in snstheme MBStore - Digital WooCommerce WordPress Theme mbstore allows PHP Local File Inclusion.This issue affects MBStore - Digital WooCommerce WordPress Theme: from n/a through ...
CVE-2023-25998 WordPress Samex - Clean, Minimal Shop WooCommerce WordPress Theme <= 2.6 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme samex allows PHP Local File Inclusion.This issue affects Samex - Clean, Minimal Shop WooCommerce WordPress Theme:...
CVE-2025-49448
CVE-2025-49448 concerns FW Food Menu (WordPress plugin) versions up to 6.0.0 and describes an unauthenticated path traversal vulnerability. The issue is reported as an ability to traverse restricted directories, enabling potential arbitrary file deletion (as highlighted by Patchstack referencing ...
CVE-2025-6751
creationtimestamp| type| source ---|---|--- 2025-06-27 03:51:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19663 2025-06-27 07:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsl4cszoxe2s 2025-06-30 20:26:56+00:00| seen|...
CVE-2025-47822
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have an on-chip debug interface with improper access control...
CVE-2025-6794
creationtimestamp| type| source ---|---|--- 2025-06-27 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-454/ 2025-07-07 16:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltf6ctazpm2a...
CVE-2025-52993
A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user e.g., nixbld or guixbuild. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before...
CVE-2025-6734
A vulnerability was found in UTT HiPER 840G up to 3.1.1-190328. It has been rated as critical. This issue affects the function sub484E40 of the file /goform/formP2PLimitConfig of the component API. The manipulation of the argument except leads to buffer overflow. The attack may be initiated...
CVE-2025-52903
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions on the 2.x branch prior to 2.33.10, the Command Execution feature of File Browser only allows the execution of shell command which have be...