23691 matches found
CVE-2025-3116
Summary: CVE-2025-3116 involves an input validation weakness in Schneider Electric Modicon Controllers (M241/M251/M258/LMC058/M262, per multiple reports) that can allow a Denial of Service when an authenticated user sends a specially crafted HTTPS request with improperly formatted body data to th...
CVE-2025-3899
CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists in Certificates page on Webserver that could cause an unvalidated data injected by authenticated malicious user leading to modify or read data in a victim’s browser...
CVE-2025-5945
CVE-2025-5945 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2025-4840 Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
The inprosysmedia-likes-dislikes-post WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...
CVE-2025-5935
A vulnerability was found in Open5GS up to 2.7.3. It has been declared as problematic. Affected by this vulnerability is the function commonregisterstate of the file src/mme/emm-sm.c of the component AMF/MME. The manipulation of the argument ranueid leads to denial of service. The attack can be...
CVE-2025-5935
Open5GS up to version 2.7.3 is affected. The issue lies in the AMF/MME component, specifically the function common_register_state in src/mme/emm-sm.c, where manipulating the ran_ue_id argument can cause a denial of service. The vulnerability can be triggered remotely and public exploitation has b...
CVE-2025-42998
creationtimestamp| type| source ---|---|--- 2025-06-10 03:46:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7ya456u625...
CVE-2025-42987
creationtimestamp| type| source ---|---|--- 2025-06-10 03:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7wwu4hgn2m 2025-06-10 15:31:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17914...
CVE-2025-5910
A vulnerability has been found in TOTOLINK EX1200T up to 4.1.2cu.5232B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack can b...
CVE-2025-43573
creationtimestamp| type| source ---|---|--- 2025-06-10 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-336/ 2025-06-10 19:31:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17973 2025-06-12 22:25:49+00:00| seen|...
CVE-2025-5911
PRODUCT/VULN: TOTOLINK EX1200T (firmware up to 4.1.2cu.5232_B20210713) suffers a buffer overflow in the HTTP POST Request Handler’s /boafrm/formDMZ functionality. VULNERABLE COMPONENT/FILE: /boafrm/formDMZ in HTTP POST Request Handler. ROOT CAUSE: failure to validate input length/size leading to ...
CVE-2025-5909 TOTOLINK EX1200T HTTP POST Request formReflashClientTbl buffer overflow
A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T up to 4.1.2cu.5232B20210713. Affected is an unknown function of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to launch th...
CVE-2025-5908
creationtimestamp| type| source ---|---|--- 2025-06-10 01:28:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17816 2025-06-10 01:33:54+00:00| published-proof-of-concept| Telegram/UVPTEGvNWegLT6R4iAM8IA5DDdZ7pzDRTagvDaZDKFK5Xkw 2025-06-10 03:56:55+00:00| seen|...
CVE-2025-42987
SAP Manage Processing Rules For Bank Statement allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter. Due to missing authorization check, the attacker can edit rules that should be restricted, compromising the integrity of the application...
CVE-2025-42993 Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement)
Due to a missing authorization check vulnerability in SAP S/4HANA Enterprise Event Enablement, an attacker with access to the Inbound Binding Configuration could create an RFC destination and assign an arbitrary high-privilege user. This allows the attacker to consume events via the RFC...
CVE-2025-44043
Keyoti SearchUnit prior to 9.0.0. is vulnerable to Server-Side Request Forgery SSRF in /KeyotiSearchEngineWebCommon/SearchService.svc/GetResults and /KeyotiSearchEngineWebCommon/SearchService.svc/GetLocationAndContentCategories. An attacker can specify their own SMB server as the indexDirectory...
CVE-2024-57189
In Erxes 1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler...
CVE-2025-49004
creationtimestamp| type| source ---|---|--- 2025-06-09 23:33:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7k3t7oni2q...