CVE-2025-7284

Summary (CVE-2025-7284) : The IrfanView CADImage Plugin is affected by a memory corruption vulnerability in DWG file parsing, allowing remote code execution after processing unvalidated user data. The issue is rooted in insufficient validation during DWG parsing and can be triggered by a user vis...

CVE-2025-7269 IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-46120

creationtimestamp| type| source ---|---|--- 2025-07-21 14:41:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114891742919452985 2025-07-22 07:21:41+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...

CVE-2025-41678

creationtimestamp| type| source ---|---|--- 2025-07-21 10:42:09+00:00| seen| https://infosec.exchange/users/certvde/statuses/114890803062994673 2025-07-21 10:42:30+00:00| seen| https://infosec.exchange/users/certvde/statuses/114890804388115598 2025-07-21 10:46:28+00:00| seen|...

CVE-2025-41675

CVE-2025-41675 concerns MB CONNECT LINE mbNET.mini and Helmholz/mbNET.mini gateways where an OS command injection arises from improper neutralization of special elements in OS commands. The vulnerability allows a high-privilege remote attacker to trigger arbitrary system commands via GET requests...

CVE-2024-6107

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps...

CVE-2025-24938

creationtimestamp| type| source ---|---|--- 2025-07-21 09:09:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luhneyz2jl27 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:40+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2024-10031

creationtimestamp| type| source ---|---|--- 2025-07-21 07:07:46+00:00| seen| https://poliverso.org/objects/0477a01e-e25d1f2b-32702de2beb9d6c0...

CVE-2025-7912

creationtimestamp| type| source ---|---|--- 2025-07-21 02:26:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugwtof2rm2o 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:40+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7914

creationtimestamp| type| source ---|---|--- 2025-07-21 01:44:22+00:00| seen| https://bsky.app/profile/potato.software/post/3luguipto3q2t 2025-07-21 02:36:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugxfk54bk2i 2025-07-22 03:54:24+00:00| seen|...

CVE-2025-54317

creationtimestamp| type| source ---|---|--- 2025-07-20 20:52:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luge5wtkpo2i...

CVE-2025-7903

creationtimestamp| type| source ---|---|--- 2025-07-20 20:35:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugdbbqe5j27 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:40+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-48965

creationtimestamp| type| source ---|---|--- 2025-07-20 20:25:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugcpeou3n2t...

CVE-2025-7901

creationtimestamp| type| source ---|---|--- 2025-07-20 20:20:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugcgg6vwc2i 2025-09-09 20:56:45+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76 2025-11-24 04:57:56+00:00| confirmed|...

CVE-2025-47917

Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedtlsx509stringtonames takes a head argument that is documented as an output argument. The documentation does not suggest that the function...

CVE-2025-46384

creationtimestamp| type| source ---|---|--- 2025-07-20 16:41:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufw6haxnv2j...

CVE-2025-7882

creationtimestamp| type| source ---|---|--- 2025-07-20 14:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufqcjraqn27...

CVE-2025-7896

Summary: CVE-2025-7896 affects harry0703 MoneyPrinterTurbo up to v1.2.6. Affected component: download_video/delete_video in app/controllers/v1/video.py. Issue: path traversal allows remote exploitation via crafted input. Local/remote impact described as potential access to files outside the inten...

CVE-2025-46383

CVE-2025-46383 is an XSS issue described across multiple sources as improper neutralization of input during web page generation (CWE-79) affecting Emby Server/Emby Windows deployments. Public entries and OpenVAS notes indicate at least Emby Server versions prior to 4.8.9 are affected, with the un...

CVE-2025-7894

A vulnerability, which was classified as critical, has been found in Onyx up to 0.29.1. This issue affects the function generatesimplesql of the file backend/onyx/agents/agentsearch/kbsearch/nodes/a3generatesimplesql.py of the component Chat Interface. The manipulation leads to sql injection. The...