6722 matches found
CVE-2025-3641
A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled...
CVE-2025-32432
CVE-2025-32432 affects Craft CMS across 3.x (3.0.0-RC1–3.9.14), 4.x (4.0.0-RC1–4.14.14), and 5.x (5.0.0-RC1–5.6.16). The vulnerability is a remote code execution via insecure deserialization in the asset transform path (notably /actions/assets/generate-transform) that can be triggered by crafted ...
CVE-2024-58250
The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges...
BELL-CVE-2024-58251
Bulletin has no description...
CVE-2025-46272
WGS-80HPT-V2 and WGS-4215-8T2S are vulnerable to a command injection attack that could allow an unauthenticated attacker to execute OS commands on the host system...
CVE-2025-2443
creationtimestamp| type| source ---|---|--- 2025-04-24 20:00:47+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lnliq7rlbk2f 2025-06-20 17:46:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19010 2025-06-20 21:14:01+00:00| seen|...
CVE-2025-46230 WordPress Popup Builder plugin <= 1.1.35 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in GhozyLab Popup Builder easy-notify-lite allows PHP Local File Inclusion.This issue affects Popup Builder: from n/a through = 1.1.35...
CVE-2025-46421
A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect...
CVE-2025-41423
Mattermost versions 10.4.x = 10.4.2, 10.5.x = 10.5.0, 9.11.x = 9.11.10 fail to properly validate permissions for the API endpoint /plugins/playbooks/api/v0/signal/keywords/ignore-thread, allowing any user or attacker to delete posts containing actions created by the Playbooks bot, even without...
CVE-2025-35965 DoS in Mattermost Playbooks via Excessive Task Actions
Mattermost versions 10.4.x = 10.4.2, 10.5.x = 10.5.0, 9.11.x = 9.11.10 fail to validate the uniqueness and quantity of task actions within the UpdateRunTaskActions GraphQL operation, which allows an attacker to create task items containing an excessive number of actions triggered by specific post...
BELL-CVE-2024-58250
Bulletin has no description...
CVE-2025-46421
A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect. Mitigation Currently, no...
CVE-2025-46420
A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes. Mitigation Currently, no mitigation is available for this vulnerability...
CVE-2025-44134
A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...
CVE-2025-25045
creationtimestamp| type| source ---|---|--- 2025-04-23 23:05:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13160 2025-04-24 01:14:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjsscbai2h 2025-04-24 03:01:45+00:00| seen| https://t.me/cvedetector/23625...
CVE-2025-1049 Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability
Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
CVE-2025-42605 Improper Access Control Vulnerability in Meon Bidding Solutions
This vulnerability exists in Meon Bidding Solutions due to improper authorization controls on certain API endpoints for the initiation, modification, or cancellation operations. An authenticated remote attacker could exploit this vulnerability by manipulating parameter in the API request body to...
CVE-2025-46393
In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packetsize is mishandled related to the rendering of all channels in an arbitrary order...