23602 matches found
CVE-2025-6434
The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox 140 and Thunderbird 140...
CVE-2025-6432
When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox 140 and Thunderbird 140...
CVE-2025-6613
creationtimestamp| type| source ---|---|--- 2025-06-25 09:47:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19431 2025-06-25 14:19:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsgsl3bv542a...
CVE-2024-51982
An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language PJL command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed PJL variable FORMLINES is set to a non...
CVE-2025-0966
creationtimestamp| type| source ---|---|--- 2025-06-25 03:47:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19416 2025-06-25 06:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfxyz6f3425...
CVE-2025-6660
creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-443/...
CVE-2025-52921
In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by uploading a crafted file and then renaming it to have a .php extension by using the Rename Function. This bypasses the initial check that...
CVE-2025-52926
In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface...
CVE-2025-25905
CADClick 1.13.0 and earlier is reported vulnerable to Cross-Site Scripting (XSS) via the tree parameter. The root cause cited in CNNVD/related entries is incorrect manipulation of the tree parameter, enabling remote attackers to inject arbitrary web script or HTML. No exploitation details are pro...
CVE-2025-25905
Cross-Site Scripting XSS vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web script or HTML via the "tree" parameter...
CVE-2025-45880
creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19402 2025-06-25 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dpyzc2s...
CVE-2024-56917
creationtimestamp| type| source ---|---|--- 2025-06-24 19:47:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19389 2025-06-25 01:39:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfi4rcjgd2i...
CVE-2025-32977
Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...
CVE-2025-6032
Podman vulnerability CVE-2025-6032: the podman machine init flow fails to verify TLS when downloading VM images from an OCI registry, enabling a potential Man-in-the-Middle. Affected component is Podman/libpod; impact is high (confidentiality, integrity, availability). Mitigation references indic...
CVE-2025-39203
creationtimestamp| type| source ---|---|--- 2025-06-24 13:02:06+00:00| seen| Telegram/b5DYkbguYKKC6SWHwVUadkrQ9RB3hxTshwlycvFN8u4r2U4 2025-06-24 14:46:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19356 2025-07-03 10:00:00+00:00| seen|...
CVE-2025-6424
CVE-2025-6424: Use-after-free in FontFaceSet causing potentially exploitable crash in Firefox (affected: Firefox <140, ESR <115.25, ESR
CVE-2025-6206
creationtimestamp| type| source ---|---|--- 2025-06-24 08:50:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19322 2025-06-24 10:29:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdva6rkxk2a...
CVE-2025-36519
creationtimestamp| type| source ---|---|--- 2025-06-24 05:49:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19315 2025-06-24 06:08:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdgoveqnr2a...