55893 matches found
OpenPanel 0.3.4 - OS Command Injection
Exploit Title: OpenPanel 0.3.4 - OS Command Injection Date: Nov 25, 2024 Exploit Author: Korn Chaisuwan, Punthat Siriwan, Pongtorn Angsuchotmetee Vendor Homepage: https://openpanel.com/ Software Link: https://openpanel.com/ Version: 0.3.4 Tested on: macOS CVE : CVE-2024-53584 POST /server/timezon...
Windows App Client < 2.0.365.0 RCE Vulnerability (Apr 2025) - Windows
Windows App Client is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2025-16264 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability was reported, but the details are not available due to the candidate number being withdrawn by its CNA. No information is provided about the estimated number of potentially...
OpenPanel 0.3.4 - Directory Traversal
Exploit Title: OpenPanel 0.3.4 - Directory Traversal Date: Dec 05, 2024 Exploit Author: Korn Chaisuwan, Punthat Siriwan, Pongtorn Angsuchotmetee Vendor Homepage: https://openpanel.com/ Software Link: https://openpanel.com/ Version: 0.3.4 Tested on: macOS CVE : CVE-2024-53537 Compress Function POS...
Pimcore customer-data-framework 4.2.0 - SQL injection
Exploit Title: Pimcore customer-data-framework 4.2.0 - SQL injection Date: 01/28/2025 Exploit Author: maeitsec Vendor Homepage: https://pimcore.com/ Software Link: https://github.com/pimcore/pimcore Version: Pimcore versions prior to 10.5.21 Tested on: Ubuntu 20.04 with Pimcore 10.5.20 CVE:...
Security Bulletin: Vulnerability in certifi affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2022-23491]
Summary The certifi package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVE CVE-2022-23491 Vulnerability Details CVEID:CVE-2022-23491 DESCRIPTION: An unspecified error in with TrustCor's ownership also operated a business that...
CVE-2025-23387
A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users to list all CLI authentication tokens and delete them before the CLI is able to get the token value.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9....
CVE-2025-3533
creationtimestamp| type| source ---|---|--- 2025-04-13 10:52:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11558 2025-04-13 13:34:53+00:00| seen| https://t.me/cvedetector/22804 2025-04-13 14:28:18+00:00| seen|...
CVE-2025-32525
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MapGeo Interactive Geo Maps interactive-geo-maps allows Reflected XSS.This issue affects Interactive Geo Maps: from n/a through = 1.6.24...
CVE-2025-32509
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPMinds Simple WP Events simple-wp-events allows Path Traversal.This issue affects Simple WP Events: from n/a through = 1.8.17...
RHEL 9 : Red Hat Ceph Storage 8.0 (RHSA-2025:3635)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3635 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a...
CVE-2025-32382
Metabase is an open source Business Intelligence and Embedded Analytics tool. When admins change Snowflake connection details in Metabase either updating a password or changing password to private key or vice versa, Metabase would not always purge older Snowflake connection details from the...
CGA-FW39-CP2Q-24R7
Bulletin has no description...
CGA-3C3P-P2Q6-H848
Bulletin has no description...
CVE-2025-2871
creationtimestamp| type| source ---|---|--- 2025-04-12 03:51:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11534 2025-04-12 05:42:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmlt6qxmjp2u 2025-04-12 09:10:19+00:00| seen| https://t.me/cvedetector/22792...
CVE-2025-32016
Microsoft Identity Web is a library which contains a set of reusable classes used in conjunction with ASP.NET Core for integrating with the Microsoft identity platform formerly Azure AD v2.0 endpoint and AAD B2C. This vulnerability affects confidential client applications, including daemons, web...
CVE-2025-32426
creationtimestamp| type| source ---|---|--- 2025-04-11 13:51:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11420 2025-04-11 17:38:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkkp5uej62r 2025-04-11 18:07:50+00:00| seen|...
WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by zaim Patchstack Alliance in WordPress Plugin SKT Blocks versions = 1.8...
WordPress Additional Custom Product Tabs for WooCommerce plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by muhammad yudha Patchstack Alliance in WordPress Plugin Additional Custom Product Tabs for WooCommerce versions = 1.7.0...