CVE-2025-27404

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

CVE-2025-2820

CVE-2025-2820 affects Bizerba GLx and CWX terminals (as cited by multiple sources). An authenticated attacker can disrupt availability of the device over the network (CVSS: Network, Privileges Required Low, User Interaction None, Impact: Availability High). The connected Red Hat, NVD, CVE List, a...

CVE-2025-26542 WordPress Zalo Live Chat Plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dang Ngoc Binh Zalo Live Chat zalo-live-chat allows Reflected XSS.This issue affects Zalo Live Chat: from n/a through = 1.1.0...

CVE-2024-45351

A code execution vulnerability exists in the Xiaomi Game center application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code...

CVE-2025-1769

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.0 via the downloadfile function. This makes it possible for authenticated attackers, with Administrator-level access and...

CVE-2025-1769 Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.0 via the downloadfile function. This makes it possible for authenticated attackers, with Administrator-level access and...

CVE-2025-29311

Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Attackers are able to leverage this vulnerability into creating crafted LLDP packets...

CVE-2025-26004

CVE-2025-26004 affects Telesquare TLR-2005KSH firmware 1.1.4. The vulnerability is an unauthorized stack buffer overflow triggered by the admin.cgi parameter setDdns, exposing potential remote impact with high/critical severity per CVSS metrics. No exploit specifics or affected vendor list beyond...

CVE-2024-55963

An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of...

CVE-2025-2783

creationtimestamp| type| source ---|---|--- 2025-03-25 22:00:44+00:00| seen| https://bsky.app/profile/oct0xor.bsky.social/post/3llabgyspos2t 2025-03-25 23:10:59+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3llafep5vld2a 2025-03-25 23:53:40+00:00| seen|...

CVE-2025-27834

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdffunc.c...

CVE-2024-58104

A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2025-1445

creationtimestamp| type| source ---|---|--- 2025-03-25 13:23:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8647 2025-03-25 15:18:49+00:00| seen| https://t.me/cvedetector/21094 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-01...

CVE-2025-24852

creationtimestamp| type| source ---|---|--- 2025-03-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04 2025-03-31 05:31:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9591 2025-03-31 09:09:23+00:00| seen| https://t.me/cvedetector/21559 2025-08-10...

CVE-2025-2740 PHPGurukul Old Age Home Management System eligibility.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/eligibility.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-0717

To exploit the vulnerability, it is necessary:...

CVE-2024-45481

CVE-2024-45481 affects the SSH server in B&R APROL prior to 4.4-00P5. The vulnerability is due to incomplete filtering of special elements in scripts, enabling an authenticated local attacker to authenticate as another legitimate user. CVSS 4.0 vector indicates Local access, Low privileges requir...

CVE-2025-2762

creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-176/ 2025-04-23 21:10:28+00:00| seen| https://t.me/cvedetector/23607...

CVE-2025-2723

CVE-2025-2723 is a confirmed issue in GNOME libgsf affecting the gsf_property_settings_collec function, where manipulation of the n_alloced_params argument can cause a heap-based buffer overflow. Public sources describe it for GNOME libgsf up to 1.14.53, with local access often noted as a prerequ...

CVE-2025-2722

CVE-2025-2722 corresponds to a vulnerability in GNOME libgsf up to 1.14.53 affecting gsf_prop_settings_collect_va, where manipulation of n_alloced_params leads to a heap-based buffer overflow. Exploitation requires local access; documentation across Red Hat, SUSE, and Ubuntu references the issue,...