9693 matches found
CVE-2025-6070
CVE-2025-6070 (Restrict File Access plugin for WordPress) is a directory traversal vulnerability (via output()) exploitable by authenticated users with Subscriber+ privileges to read arbitrary server files on all versions up to 1.1.2. The connected documents confirm the attack vector is local fil...
CVE-2025-50145
creationtimestamp| type| source ---|---|--- 2025-06-14 07:36:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkgvqkp4t2k...
CVE-2025-50147
creationtimestamp| type| source ---|---|--- 2025-06-14 07:08:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkfeq4rbb2a...
CVE-2025-48964
creationtimestamp| type| source ---|---|--- 2025-06-13 18:04:24+00:00| seen| https://gist.github.com/EbonJaeger/94d6b11fee980a997a2d1e6007418f90 2025-07-21 22:00:41+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luiyhkfkkc2y 2025-07-21 22:21:22+00:00| seen|...
CVE-2025-49581
creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18306 2025-06-13 17:05:18+00:00| published-proof-of-concept| Telegram/LbSE4ui0deWaIbAIySI6HyoY8sH4t9aZhKhv-gkpgMW3iE 2025-06-13 17:27:29+00:00| seen|...
CVE-2025-36633
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation...
CVE-2025-45987
Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bsSetDNSInfo...
CVE-2025-45986
creationtimestamp| type| source ---|---|--- 2025-06-13 11:33:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18290 2025-06-13 15:13:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lripzfawgp2a 2025-06-13 16:08:21+00:00| published-proof-of-concept|...
CVE-2025-29902
Remote code execution that allows unauthorized users to execute arbitrary code on the server machine...
CVE-2025-46783
creationtimestamp| type| source ---|---|--- 2025-06-13 08:34:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18283 2025-06-13 09:31:46+00:00| seen| Telegram/o1ZTzABdZN3OAzUP6RsYm0T2XzE-gKGKO27WNgsxHNfYZg 2025-06-13 12:13:44+00:00| seen|...
CVE-2025-22241
File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location a...
CVE-2025-5930
creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18250 2025-06-13 05:15:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrholwrb6m2e...
CVE-2025-4275
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...
CVE-2025-49589 PCSX2 Contains a Stack-based Buffer Overflow in IOP Console Logging
PCSX2 is a free and open-source PlayStation 2 PS2 emulator. A stack-based buffer overflow exists in the KprintfHLE function of PCSX2 versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled IOP...
CVE-2025-5485
User names used to access the web management interface are limited to the device identifier, which is a numerical identifier no more than 10 digits. A malicious actor can enumerate potential targets by incrementing or decrementing from known identifiers or through enumerating random digit sequenc...
CVE-2025-49081
There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to server version 13.55. Attackers with system administrator permissions can impair the availability of the Secure Access administrative UI by writing invalid data to the warehouse...
CVE-2025-47160
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-32715
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...