23691 matches found
CVE-2025-29627
An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Biometric Authentication Module...
CVE-2025-5848
creationtimestamp| type| source ---|---|--- 2025-06-08 23:01:03+00:00| published-proof-of-concept| Telegram/zw2BSkp-Ym0oCvBFZDIlQeX8xwHK1nK-jjrzwqXLyUsxBM 2025-06-08 23:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr52rvojk42m...
CVE-2025-35008
The CVE-2025-35008 entry concerns Microhard BulletLTE-NA2 and IPn4Gii-NA2 devices affected by a post-authentication command injection in the AT+MMNAME command (CWE-88). Affected component: AT command handling in these gateways; root cause: improper neutralization of argument delimiters leading to...
CVE-2025-35004
The CVE-2025-35004 entry applies to Microhard BulletLTE-NA2 and IPn4Gii-NA2. It describes a post-authentication command-injection vulnerability in the AT+MFIP command, categorized as CWE-88 (Argument Injection) that can lead to privilege escalation. Underlying cause: improper neutralization of ar...
CVE-2025-29871
An out-of-bounds read vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later...
CVE-2025-33035
A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5...
CVE-2025-27563
creationtimestamp| type| source ---|---|--- 2025-06-08 15:32:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr46pjiwfo2e...
CVE-2025-25217
creationtimestamp| type| source ---|---|--- 2025-06-08 15:27:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr46gkzc522p...
CVE-2025-38004
creationtimestamp| type| source ---|---|--- 2025-06-08 15:19:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr45y6grjr2u...
CVE-2025-41646
An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device...
CVE-2025-27531
Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 before 2.1.0, this issue would allow an authenticated attacker to read arbitrary files by double writing the param. Users are recommended to upgrade to version 2.1.0, which fixes the...
CVE-2025-5847 Tenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow
A vulnerability has been found in Tenda AC9 15.03.02.13 and classified as critical. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg of the component HTTP POST Request Handler. The manipulation of the argument remoteIp leads to stack-based...
CVE-2025-30629
Cross-Site Request Forgery CSRF vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows Cross Site Request Forgery.This issue affects Bitly URL Shortener: from n/a through = 1.4.1...
CVE-2025-30952
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdive Nexa Blocks nexa-blocks allows Stored XSS.This issue affects Nexa Blocks: from n/a through = 1.1.0...
CVE-2025-30994
Cross-Site Request Forgery CSRF vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Cross Site Request Forgery.This issue affects CubeWP: from n/a through = 1.1.29...
CVE-2025-30958
Missing Authorization vulnerability in onOffice GmbH onOffice for WP-Websites onoffice-for-wp-websites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects onOffice for WP-Websites: from n/a through = 6.5.1...
CVE-2025-49246
Missing Authorization vulnerability in cmoreira Testimonials Showcase testimonials-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimonials Showcase: from n/a through = 1.9.16...
CVE-2025-49309
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Team Member ht-team-member allows Stored XSS.This issue affects HT Team Member: from n/a through = 1.1.7...
