CVE-2025-20172

A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker...

CVE-2025-25160

creationtimestamp| type| source ---|---|--- 2025-02-07 10:18:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqhlgtl2v 2025-02-07 12:08:37+00:00| seen| https://t.me/cvedetector/17477 2025-02-07 13:45:58+00:00| seen|...

CVE-2025-25103

Cross-Site Request Forgery CSRF vulnerability in bnielsen Indeed API indeed-api allows Cross Site Request Forgery.This issue affects Indeed API: from n/a through = 0.5...

CVE-2024-49837

Memory corruption while reading CPU state data during guest VM suspend...

CVE-2025-1061 Nextend Social Login Pro <= 3.1.16 - Authentication Bypass via Apple OAuth provider

The Nextend Social Login Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.16. This is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plugin. This makes it possible for...

CVE-2025-1084

A vulnerability, which was classified as problematic, has been found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public...

CVE-2024-13417

Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader. After the device is restarted, it gets back to fully working state. 2N has released an updated version 2.46 of 2N OS, where this vulnerability is mitigated. It is recommended that all customers update their...

GHSA-9R4C-JWX3-3J76

creationtimestamp| type| source ---|---|--- 2025-02-06 18:43:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113958415485426001 2025-02-06 21:00:33+00:00| published-proof-of-concept| Telegram/62ADuuFkUh-GLH8SzGnVJ77GwT3veDkQ-knb1-PeB1sA...

CVE-2025-24786 Path traversal opening Sqlite3 database in WhoDB

WhoDB is an open source database management tool. While the application only displays Sqlite3 databases present in the directory /db, there is no path traversal prevention in place. This allows an unauthenticated attacker to open any Sqlite3 database present on the host machine that the applicati...

CVE-2024-39272

creationtimestamp| type| source ---|---|--- 2025-02-06 16:50:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113957968752308211 2025-02-06 18:48:16+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113958433252957094 2025-02-06 18:48:55+00:00| seen|...

CVE-2024-12602

Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-26630

Improper input validation vulnerability in HANDY Groupware’s ActiveX moudle allows attackers to download or execute arbitrary files. This vulnerability can be exploited by using the file download or execution path as the parameter value of the vulnerable function...

CVE-2025-23953

Unrestricted Upload of File with Dangerous Type vulnerability in Scriptonite user files user-files allows Upload a Web Shell to a Web Server.This issue affects user files: from n/a through = 2.4.2...

CVE-2025-24534

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dinamiko DPortfolio dportfolio allows Reflected XSS.This issue affects DPortfolio: from n/a through = 2.0...

CVE-2024-36557

CVE-2024-36557 affects Forever KidsWatch Call Me KW50 and KW60 variants where the device ID is based on IMEI. A malicious user can hijack a registered unit by changing the IMEI to that of another unit in the mobile app, enabling remote control of the device via the app. The vulnerability is roote...

CVE-2022-41268

In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAPBW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC 810, a transaction code reserved for the customer is used. By implementing such transaction code, a malicious user may execute unauthorized...

CVE-2024-56472

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2022-1285

Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.8...

CVE-2024-57077

creationtimestamp| type| source ---|---|--- 2025-02-05 22:16:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxrouxi2b 2025-02-06 06:31:26+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-7qgg-vw88-cc99 2025-02-06 16:48:33+00:00| seen|...

CVE-2022-2951

Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index vulnerability during processing of H3D files. A DWORD value from a PoC file is extracted and used as an index to write to a buffer, leading to memory corruption...