6723 matches found
CVE-2025-6794
creationtimestamp| type| source ---|---|--- 2025-06-27 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-454/ 2025-07-07 16:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltf6ctazpm2a...
CVE-2025-52993
A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user e.g., nixbld or guixbuild. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before...
CVE-2025-6734
A vulnerability was found in UTT HiPER 840G up to 3.1.1-190328. It has been rated as critical. This issue affects the function sub484E40 of the file /goform/formP2PLimitConfig of the component API. The manipulation of the argument except leads to buffer overflow. The attack may be initiated...
CVE-2025-52903
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions on the 2.x branch prior to 2.33.10, the Command Execution feature of File Browser only allows the execution of shell command which have be...
CVE-2025-52934
creationtimestamp| type| source ---|---|--- 2025-06-26 16:29:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjkcwdkso2r...
CVE-2025-6709
The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication. This can be reproduced using the mongo shell to send a malicious JSON payload leading to an invariant failure and server crash. Thi...
CVE-2025-48466
Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks...
CVE-2025-5813 Amazon Products to WooCommerce <= 1.2.7 - Missing Authorization to Unauthenticated Arbitrary Product Creation
The Amazon Products to WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wcta2wgetamazonproductcallback function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to create n...
CVE-2025-5559 TimeZoneCalculator <= 3.37 - Authenticated (Contributor+) Stored Cross-Site Scripting
The TimeZoneCalculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'timezonecalculatoroutput' shortcode in all versions up to, and including, 3.37 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...
CVE-2025-6527
A vulnerability, which was classified as problematic, was found in 70mai M300 up to 20250611. Affected is an unknown function of the component Web Server. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The complexity of an attack is...
CVE-2025-6652
CVE-2025-6652 concerns the PDF-XChange Editor PRC file parsing vulnerability. The flaw arises from insufficient validation during PRC data handling, allowing an out-of-bounds read that could disclose sensitive information. Exploitation requires user interaction (target must visit a malicious page...
CVE-2025-6654 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...
CVE-2025-45333
berkeley-abc abc 1.1 contains a Null Pointer Dereference NPD vulnerability in the AbcNtkCecFraigPart function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes...
CVE-2025-45332
vkoskiv c-ray 1.1 contains a Null Pointer Dereference NPD vulnerability in the parsemtllib function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes...
CVE-2025-6445 ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability
ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...
CVE-2024-57708
creationtimestamp| type| source ---|---|--- 2025-06-25 15:52:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19468 2025-06-27 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsmjzasxp227 2025-07-26 21:02:25+00:00| seen|...
CVE-2025-6430
creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19452 2025-06-27 13:40:29+00:00| seen| https://t.me/ptswarm/237 2025-06-28 06:16:08+00:00| seen| https://poliverso.org/objects/0477a01e-97b3e0a9-4476130521c6750c 2025-09-01...
CVE-2024-27685
creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19445 2025-06-25 16:19:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsgzbtikpi2r...
Moderate: Red Hat Security Advisory: osbuild-composer security update
An update for osbuild-composer is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...