9693 matches found
CVE-2025-49148 ClipShare Server Allows Local Privilege Escalation via DLL Hijacking
ClipShare is a lightweight and cross-platform tool for clipboard sharing. Prior to 3.8.5, ClipShare Server for Windows uses the default Windows DLL search order and loads system libraries like CRYPTBASE.dll and WindowsCodecs.dll from its own directory before the system path. A local, non-privileg...
CVE-2025-49146 pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration
pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with channel binding set to required default value is prefer, the driver would incorrectly allow connections to proceed with authentication methods that do not support...
CVE-2025-40914
Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328...
CVE-2025-49709
Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4...
CVE-2025-4128
creationtimestamp| type| source ---|---|--- 2025-06-11 11:30:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18066 2025-06-11 14:58:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdoa5f7in2m...
CVE-2025-3302
creationtimestamp| type| source ---|---|--- 2025-06-11 11:30:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18065 2025-06-11 12:00:34+00:00| seen| Telegram/VPdIX74JFhX3A7bMK48cyvYyuxsCtEg0wOkXsCg0hIDmZSw 2025-06-11 15:02:55+00:00| seen|...
CVE-2025-5476
creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-357/ 2025-06-21 00:45:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19092 2025-06-21 02:00:38+00:00| seen|...
CVE-2025-5823
creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-341/ 2025-06-25 18:52:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19516...
CVE-2025-5827
creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-346/ 2025-06-25 18:52:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19517 2025-06-25 21:24:51+00:00| seen|...
CVE-2025-49158
creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-365/...
CVE-2025-49211
creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-368/...
CVE-2025-5820
creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-358/ 2025-06-21 00:45:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19093...
CVE-2025-47849
creationtimestamp| type| source ---|---|--- 2025-06-11 02:12:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcdfkdc372p 2025-06-14 04:33:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18353...
CVE-2025-5985
creationtimestamp| type| source ---|---|--- 2025-06-11 01:55:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcchumwne2s...
WordPress CubeWP Framework plugin <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation vulnerability
Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Foxyyy in WordPress Plugin CubeWP versions = 1.1.23...
CVE-2025-5972
A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/manage-subadmins.php. The manipulation of the argument fullname leads to cross site scripting. It is possible to launch the attack remotel...
CVE-2025-0051
Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service...
CVE-2025-47977
Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...