6722 matches found
CVE-2025-24044 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2023-42784
creationtimestamp| type| source ---|---|--- 2025-03-11 16:40:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7172 2025-03-11 17:37:54+00:00| seen| https://t.me/cvedetector/20104 2025-03-11 18:06:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4nsrg5vm2m 2025-08-13...
CVE-2025-25747
Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive information via the ripristinabackup parameter in the creabackup.php endpoint...
CVE-2025-2193
creationtimestamp| type| source ---|---|--- 2025-03-11 14:05:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4af65bx426 2025-03-11 15:57:13+00:00| seen| https://t.me/cvedetector/20082...
CVE-2024-12546
CVE-2024-12546 is rejected/withdrawn by the CVE Numbering Authority and is not an active vulnerability entry.
CVE-2025-25266
creationtimestamp| type| source ---|---|--- 2025-03-11 11:35:12+00:00| seen| Telegram/7ohonUKXJXc8nNP-FALzHo1dYyqTYbEicJy56ekdY6IuU 2025-03-11 13:26:52+00:00| seen| https://t.me/cvedetector/20076 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-08...
CVE-2025-27396
creationtimestamp| type| source ---|---|--- 2025-03-11 11:35:11+00:00| seen| Telegram/BUC-FpXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc 2025-03-11 11:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114143638979930528 2025-03-11 12:35:48+00:00| seen|...
CVE-2024-56181
A vulnerability has been identified in SIMATIC Field PG M5 All versions, SIMATIC IPC BX-21A All versions V31.01.07, SIMATIC IPC BX-32A All versions V29.01.07, SIMATIC IPC BX-39A All versions V29.01.07, SIMATIC IPC BX-59A All versions V32.01.04, SIMATIC IPC PX-32A All versions V29.01.07, SIMATIC I...
CVE-2025-2177
CVE-2025-2177 affects libzvbi up to 0.2.43, with the vulnerable code path in src/search.c (function vbi_search_new). The issue arises from manipulating pat_len, causing an integer overflow and enabling a remote attack. The exploit has been disclosed publicly. A fix is available in version 0.2.44,...
CVE-2024-12009
creationtimestamp| type| source ---|---|--- 2025-03-11 05:05:02+00:00| seen| https://t.me/cvedetector/20028 2025-03-11 05:55:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk3ey3rdoh2h...
CVE-2025-26661
creationtimestamp| type| source ---|---|--- 2025-03-11 01:41:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7086 2025-03-11 01:48:19+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114141278846931278 2025-03-11 02:00:59+00:00| seen|...
CVE-2024-54558
creationtimestamp| type| source ---|---|--- 2025-03-10 19:38:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7030 2025-03-10 21:45:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2jmu4jel2j 2025-03-11 04:41:14+00:00| seen|...
CVE-2025-1296
Nomad Community and Nomad Enterprise “Nomad” are vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs. This vulnerability, identified as CVE-2025-1296, is fixed in Nomad Community Edition 1.9.7 and Nomad Enterprise 1.9.7, 1.8.11, and 1.7.19...
CVE-2024-47109
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 UI could disclosure the installation path of the server which could aid in further attacks against the system...
CVE-2025-26933
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Nitin Prakash WC Place Order Without Payment wc-place-order-without-payment allows PHP Local File Inclusion.This issue affects WC Place Order Without Payment: from n/a through =...
CVE-2025-27255
Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...
CVE-2025-27255
Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...
CVE-2025-27253
A CWE-15 "External Control of System or Configuration Setting" in GE Vernova UR IED family devices from version 7.0 up to 8.60 allows an attacker to provide input that establishes a TCP connection through a port forwarding. The lack of the IP address and port validation may allow the attacker to...