CVE-2025-32926

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Path Traversal.This issue affects Grand Restaurant: from n/a through = 7.0...

CVE-2008-7289

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 does not properly handle the simultaneous changing of multiple passwords, which makes it easier for remote authenticated users to cause a denial of service DB2 daemon deadlock by making password changes that trigger updates to a D...

CVE-2009-2423

SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL commands via the cateid parameter in a list action...

CVE-1999-0236

ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs...

CVE-1999-0690

HP CDE program includes the current directory in root's PATH variable...

CVE-1999-0220

Attackers can do a denial of service of IRC by crashing the server...

CVE-1999-0714

Vulnerability in Compaq Tru64 UNIX edauth command...

CVE-1999-0780

KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file...

CVE-1999-0636

The discard service is running...

CVE-1999-0492

The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses...

CVE-1999-0497

Anonymous FTP is enabled...

CVE-1999-0453

An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol CDP...

CVE-1999-0407

By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system...

CVE-1999-0087

Denial of service in AIX telnet can freeze a system and prevent users from accessing the server...

CVE-1999-0084

Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0...

CVE-2025-5020

creationtimestamp| type| source ---|---|--- 2025-05-21 17:43:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17161 2025-05-21 21:22:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppjvvscq424...

CVE-2025-48200

creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4ao7zly2h 2025-05-28 10:38:32+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lq7z64kr3s2m...

CVE-2025-20152

creationtimestamp| type| source ---|---|--- 2025-05-21 16:41:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17151 2025-05-21 18:46:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppb6jsypy2h 2025-05-23 17:40:40+00:00| seen| https://t.me/icscert/1168 2025-05-23...

CVE-2024-23337

jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue...

CVE-2025-48414 Hard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations

There are several scripts in the web interface that are accessible via undocumented hard-coded credentials. The scripts provide access to additional administrative/debug functionality and are likely intended for debugging during development and provides an additional attack surface...