CVE-2025-23549

CVE-2025-23549 affects the WordPress Maniac SEO plugin (versions

CVE-2025-23538 WordPress WP Contest plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sophia M Williams WP Contest wp-contest allows Reflected XSS.This issue affects WP Contest: from n/a through = 1.0.0...

CVE-2024-53030

Memory corruption while processing input message passed from FE driver...

CVE-2024-53029

CVE-2024-53029 affects Qualcomm-based systems running an Automotive OS Platform. The issue is memory corruption caused by reading a value from a buffer controlled by a Guest Virtual Machine (VM). Connected sources corroborate that the vulnerability stems from improper handling of guest-controlled...

CVE-2024-38426 Improper Authentication in Modem

While processing the authentication message in UE, improper authentication may lead to information disclosure...

CVE-2025-1866

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code built specifically for the Win32...

CVE-2025-1723

creationtimestamp| type| source ---|---|--- 2025-03-03 08:29:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6160 2025-03-03 08:49:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljhky6hfrb2b 2025-03-03 09:48:25+00:00| seen|...

CVE-2025-1840

creationtimestamp| type| source ---|---|--- 2025-03-03 00:29:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6118 2025-03-03 01:30:33+00:00| published-proof-of-concept| Telegram/pstnQ8ZZOX-2Yeq-UDXjBXIKQOIrf-BFgYyilC58DHdCcZU 2025-03-03 02:34:12+00:00| seen|...

CVE-2024-53388

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2025-1817 Mini-Tmall Admin Name admin cross site scripting

A vulnerability classified as problematic was found in Mini-Tmall up to 20250211. This vulnerability affects unknown code of the file /admin of the component Admin Name Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-25723

Buffer Overflow vulnerability in GPAC version 2.5 allows a local attacker to execute arbitrary code...

CVE-2025-25724

listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custo...

BELL-CVE-2024-58017

Bulletin has no description...

CVE-2025-23119

An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution RCE by a malicious actor with access to UniFi Protect Cameras adjacent network...

CVE-2025-23117

An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system...

CVE-2025-23118

creationtimestamp| type| source ---|---|--- 2025-03-01 02:27:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6035 2025-03-01 06:24:44+00:00| seen| https://t.me/cvedetector/19205 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-376/ 2025-08-19 18:29:29+00:0...

CVE-2024-8425

creationtimestamp| type| source ---|---|--- 2025-02-28 09:27:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5860 2025-02-28 11:10:24+00:00| seen| https://t.me/cvedetector/19135 2025-02-28 11:48:48+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114081354392866059 2025-04-...

CVE-2025-1744

Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before 5.9.9...

CVE-2025-1682

creationtimestamp| type| source ---|---|--- 2025-02-28 00:25:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5825 2025-02-28 01:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114078994918555296 2025-02-28 03:38:46+00:00| seen| https://t.me/cvedetector/19105 2025-03-...

CVE-2025-24832

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension f...