CVE-2025-20223

A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to read and modify data in a repository that belongs to an internal service of an affected device. This vulnerability is due to insufficient enforcement of access control on HTTP...

CVE-2025-20223

A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to read and modify data in a repository that belongs to an internal service of an affected device. This vulnerability is due to insufficient enforcement of access control on HTTP...

CVE-2025-20164

CVE-2025-20164 affects Cisco IOS Software’s Industrial Ethernet Switch DM. The issue is insufficient authorization validation, allowing an authenticated, remote attacker with valid credentials (privilege level 5+; read-only DM users are level 5) to send a crafted HTTP request and escalate to priv...

CVE-2025-20190

A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authenticated, remote attacker to remove arbitrary users that are defined on an affected device. This vulnerability is due to insufficient access control of actions executed by lobby...

CVE-2025-20137

Cisco IOS Software on Catalyst 1000 and Catalyst 2960L switches suffers an ACL bypass vulnerability when both an IPv4 ACL and a dynamic IP Source Guard ACL are configured on the same interface (an unsupported configuration). The issue enables an unauthenticated remote attacker to bypass an ACL by...

CVE-2025-47493

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ultimate Blocks Ultimate Blocks ultimate-blocks allows DOM-Based XSS.This issue affects Ultimate Blocks: from n/a through = 3.2.9...

CVE-2025-47457

Missing Authorization vulnerability in dgamoni LocateAndFilter locateandfilter allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LocateAndFilter: from n/a through = 1.6.16...

CVE-2025-47692 WordPress ContentStudio plugin <= 1.3.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contentstudio: from n/a through = 1.3.5...

CVE-2025-47623

CVE-2025-47623 : A stored XSS vulnerability in the WordPress plugin “Easy PayPal Buy Now Button” (versions n/a through 2.0) arises from improper input neutralization during web page generation. The issue is triggered when user-supplied input is reflected in pages, allowing an attacker to store an...

CVE-2025-47510

CVE-2025-47510 is a WordPress Display Eventbrite Events vulnerability: an authenticated (Contributor+) Local File Inclusion due to improper filename control in include/require statements. Affected software: Display Eventbrite Events = 6.3. If upgrade is not possible, apply vendor-provided mitigat...

CVE-2025-47496 WordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PublishPress PublishPress Authors publishpress-authors allows PHP Local File Inclusion.This issue affects PublishPress Authors: from n/a through = 4.7.5...

CVE-2025-32398

A NULL Pointer Dereference in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet...

CVE-2025-3853

creationtimestamp| type| source ---|---|--- 2025-05-07 02:21:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15249 2025-05-07 04:26:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokkl3sjfo2l 2025-05-07 07:12:46+00:00| seen| https://t.me/cvedetector/24665...

CVE-2025-21813

creationtimestamp| type| source ---|---|--- 2025-05-06 22:09:33+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lojvjhxzy22t...

CVE-2025-47419

Crestron Automate VX contains a vulnerability (CVE-2025-47419) where Web UI and API access over non-secure ports allows cleartext transmission of sensitive information, including passwords. Affected firmware ranges are 5.6.8161.21536 through 6.4.0.49. The issue originates from transmitting sensit...

CVE-2025-45490

creationtimestamp| type| source ---|---|--- 2025-05-06 18:21:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis6swtm2l 2025-05-06 20:20:26+00:00| seen| https://t.me/cvedetector/24633...

CVE-2025-30165

CVE-2025-30165 : In multi-node vLLM deployments using the V0 engine, a secondary host opens a SUB socket and deserializes inbound data with Python’s unsafe pickle over ZeroMQ XPUB/SUB, enabling remote code execution. The issue affects V0 deployments with tensor parallelism across hosts; V1 is una...

CVE-2021-12341

creationtimestamp| type| source ---|---|--- 2025-05-06 14:49:58+00:00| seen| https://gist.github.com/chrispatrick/ef9adba1d09172543266af24c83130a8...

CVE-2025-0984

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Netoloji Software E-Flow allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS, File Content Injection. This issue...

CVE-2025-40625

creationtimestamp| type| source ---|---|--- 2025-05-06 11:21:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15086 2025-05-06 13:32:41+00:00| seen| Telegram/Z0xWuJVL5KIv8Y3txxIuKntecLAX-t-7jcSbPF5IOOqoA 2025-05-06 14:21:35+00:00| seen|...