6722 matches found
CVE-2024-13933 FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions
The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.7. This is due to missing or incorrect nonce validation on the foodbakeryvarbackupfiledelete, foodbakerywidgetfiledelete,...
CVE-2024-50631
creationtimestamp| type| source ---|---|--- 2025-03-19 06:52:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8028 2025-03-19 07:57:40+00:00| seen| https://t.me/cvedetector/20622 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-213/...
CVE-2025-29401
creationtimestamp| type| source ---|---|--- 2025-03-19 02:18:11+00:00| seen| https://gist.github.com/bGl1o/f946e99e94f3b563c9b9b5c095da660a 2025-03-19 18:43:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqtnaz3gr2s 2025-03-19 18:49:27+00:00| seen| https://t.me/cvedetector/2065...
CVE-2025-29930 imFAQ allows local file inclusion in seo.php
imFAQ is an advanced questions and answers management system for ImpressCMS. Prior to 1.0.1, if the $GET'seoOp' parameter is manipulated to include malicious input e.g., seoOp=php://filter/read=convert.base64-encode/resource=/var/www/html/config.php, the application could allow an attacker to rea...
CVE-2025-30111
creationtimestamp| type| source ---|---|--- 2025-03-18 17:44:16+00:00| seen| https://t.me/cvedetector/20579 2025-03-18 18:13:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkobibvent26 2025-03-24 22:23:45+00:00| published-proof-of-concept|...
CVE-2025-0755
CVE-2025-0755 involves potential buffer overflow in the MongoDB C driver (bson_append family) that can cause a segmentation fault when a final BSON document exceeds INT32_MAX. Affected: libbson < 1.27.5; MongoDB Server < 8.0.1 (v8.0) and
CVE-2025-2471
creationtimestamp| type| source ---|---|--- 2025-03-17 23:48:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7889 2025-03-18 02:01:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkml5rn6dg2k 2025-03-18 03:31:07+00:00| seen|...
CVE-2023-22512
This High severity DoS Denial of Service vulnerability was introduced in version 5.6.0 of Confluence Data Center and Server. With a CVSS Score of 7.5, this vulnerability allows an unauthenticated attacker to cause a resource to be unavailable for its intended users by temporarily or indefinitely...
mod_auth_openidc security update
An update is available for modauthopenidc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The modauthopenidc is an OpenID Connect authentication module for Apac...
dpdk security update
An update is available for dpdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dpdk packages provide the Data Plane Development Kit, which is a set of...
python3.11 security update
An update is available for python3.11. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...
libsndfile:1.0.31 security update
An update is available for libsndfile. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libsndfile is a C library for reading and writing files containing sampled...
brotli bug fix and enhancement update
An update is available for brotli. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Brotli is a generic-purpose lossless compression algorithm that compresses dat...
bzip2 security update
An update is available for bzip2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The bzip2 packages contain a freely available, high-quality data compressor. It...
CVE-2024-44866
A buffer overflow in the GuitarPro1::read function of MuseScore Studio v4.3.2 allows attackers to to execute arbitrary code or cause a Denial of Service DoS via opening a crafted GuitarPro file...
CVE-2025-22474
creationtimestamp| type| source ---|---|--- 2025-03-17 18:38:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114179224013214264 2025-03-17 19:08:42+00:00| seen| https://t.me/cvedetector/20492 2025-03-17 19:47:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7845...
CVE-2025-2370 TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig stack-based overflow
A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112B20220316. It has been declared as critical. Affected by this vulnerability is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid leads to stack-based buffer overflow. The...
CVE-2025-2369 TOTOLINK EX1800T cstecgi.cgi setPasswordCfg stack-based overflow
A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112B20220316. It has been classified as critical. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument admpass leads to stack-based buffer overflow. It is possible to launch the atta...
CVE-2025-1724 Account Takeover
Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD only account takeover because of a hardcoded sensitive token...