CVE-2025-54455

Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0...

CVE-2025-54141

ViewVC is a browser interface for CVS and Subversion version control repositories. In versions 1.1.0 through 1.1.31 and 1.2.0 through 1.2.3, the standalone.py script provided in the ViewVC distribution can expose the contents of the host server's filesystem though a directory traversal-style...

CVE-2025-8030

Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code. This vulnerability affects Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1...

CVE-2025-8034

Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...

CVE-2025-36520

creationtimestamp| type| source ---|---|--- 2025-07-22 15:30:05+00:00| seen| https://infosec.place/objects/25421bc7-dc80-4f89-908d-46367e974cd4...

CVE-2024-13973

creationtimestamp| type| source ---|---|--- 2025-07-22 13:48:46+00:00| seen| https://poliverso.org/objects/0477a01e-605c14d2-887a4e63c671f474 2025-07-23 03:45:08+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lum46iuol22j 2025-07-24 04:33:21+00:00| seen|...

CVE-2025-7952

creationtimestamp| type| source ---|---|--- 2025-07-22 12:24:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114896867677018195...

CVE-2025-7900 Insecure Direct Object Reference in extension "femanager" (femanager)

The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0...

CVE-2025-46121

creationtimestamp| type| source ---|---|--- 2025-07-22 07:21:42+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...

CVE-2025-46123

creationtimestamp| type| source ---|---|--- 2025-07-22 07:21:42+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...

CVE-2025-54077

creationtimestamp| type| source ---|---|--- 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:44+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-6831

creationtimestamp| type| source ---|---|--- 2025-07-22 03:54:23+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:38+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7952 TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection

A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. This vulnerability affects the function ckeckKeepAlive of the file wireless.so of the component MQTT Packet Handler. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-7986

creationtimestamp| type| source ---|---|--- 2025-07-22 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-639/...

CVE-2025-7342

creationtimestamp| type| source ---|---|--- 2025-07-22 02:06:18+00:00| seen| https://bsky.app/profile/kubernetes.io/post/3lujg6tlul32q 2025-07-22 09:07:19+00:00| seen| https://bsky.app/profile/kubernetes.dev/post/3luk5pnnigc2e 2025-07-22 10:46:55+00:00| seen| https://seclists.org/oss-sec/2025/q3/...

CVE-2025-31513

CVE-2025-31513 affects AlertEnterprise Guardian 4.1.14.2.2.1. The issue allows privilege escalation to administrator via the IsAdminApprover parameter in a Request Building Access submission (/requestSubmit API). Remediation is to upgrade to a non-vulnerable build version listed by the vendor (e....

CVE-2025-38352

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel If an exiting non-autoreaping task has already passed exitnotify and calls handleposixcputimers from IRQ, it can be reaped by its parent or debugger rig...

PT-2025-30403 · Undefined · Undefined

CVE-2025-54355 Rejected reason https://t.co/4vdTlSV9OB...

CVE-2025-7230

INVT VT-Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-7227

INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a...