CVE-2025-0104

creationtimestamp| type| source ---|---|--- 2025-01-11 03:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgql43hlo2m 2025-01-11 04:04:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1269 2025-01-11 04:53:13+00:00| seen| https://t.me/cvedetector/15021...

CVE-2024-57213

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the actionpasswd function...

CVE-2024-57213

creationtimestamp| type| source ---|---|--- 2025-01-10 17:05:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113805147468821557 2025-01-10 17:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lffp25qbi42d 2025-01-10 17:54:11+00:00| seen|...

CVE-2024-54910

Hasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File recovery function...

CVE-2024-10215

creationtimestamp| type| source ---|---|--- 2025-01-09 20:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113800361632340355...

CVE-2024-56113

Smart Toilet Lab - Motius 1.3.11 is running with debug mode turned on DEBUG = True and exposing sensitive information defined in Django settings file through verbose error page...

CVE-2024-13240

Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05...

CVE-2025-22151

creationtimestamp| type| source ---|---|--- 2025-01-09 19:07:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113799964021202828 2025-01-09 19:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfckfbem2i 2025-01-09 19:22:02+00:00|...

CVE-2024-13249 Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-013

Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 7.X-1.0 before 7.X-1.2...

CVE-2025-22527

creationtimestamp| type| source ---|---|--- 2025-01-09 16:17:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd3bwniyc2e...

CVE-2025-22595

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows Reflected XSS.This issue affects Mailing Group Listserv: from n/a through = 2.0.9...

CVE-2024-10106

creationtimestamp| type| source ---|---|--- 2025-01-09 14:57:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113798982541004567 2025-01-09 15:14:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/959 2025-01-09 15:15:47+00:00| seen|...

CVE-2024-10106 Ember ZNet buffer overflow in 'packet handoff' plugin

A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's buffer...

CVE-2024-12491

creationtimestamp| type| source ---|---|--- 2025-01-09 11:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhbws5u2m 2025-01-09 11:53:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfcmjufah62k 2025-01-09 11:59:45+00:00| seen|...

CVE-2024-5769 MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Limited Settings Update

The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

CVE-2025-0345

A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function listData of the file /sys/menu/listData. The manipulation of the argument order leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2024-43658

Patch traversal, External Control of File Name or Path vulnerability in Iocharger Home allows deletion of arbitrary files This issue affects Iocharger firmware for AC model before firmware version 25010801. Likelihood: High, but requires authentication Impact: Critical – The vulnerability can be...

CVE-2024-43657

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: High. However, the attacker will need a low privilege account to gai...

CVE-2024-43654

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects all Iocharger AC EV charger models on a firmware version before 25010801. Likelihood: Moderate – The binary do...

CVE-2024-43651

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC models before version 241207101 Likelihood: Moderate – The binary does not seem to be used by the web interface, so it...