9437 matches found
CVE-2025-2602 SourceCodester Kortex Lite Advocate Office Management System deactivate_reg.php sql injection
A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file deactivatereg.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. T...
CVE-2025-2587
creationtimestamp| type| source ---|---|--- 2025-03-21 12:22:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8330 2025-03-21 13:23:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp5755m2s 2025-03-21 14:18:23+00:00| seen|...
CVE-2025-25068
Mattermost versions 10.4.x = 10.4.2, 10.3.x = 10.3.3, 9.11.x = 9.11.8, 10.5.x = 10.5.0 fail to enforce MFA on plugin endpoints, which allows authenticated attackers to bypass MFA protections via API requests to plugin-specific routes...
CVE-2025-0313
A flaw was found in Ollama. This vulnerability allows a malicious user to cause a denial of service DoS attack via improper validation of array index bounds in the GGUF model handling code, which can be exploited remotely over a network. Mitigation Mitigation for this issue is either not availabl...
CVE-2025-2582
creationtimestamp| type| source ---|---|--- 2025-03-21 07:19:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8325 2025-03-21 10:07:44+00:00| seen| https://t.me/cvedetector/20798 2025-03-21 11:23:43+00:00| seen|...
CVE-2025-30345
creationtimestamp| type| source ---|---|--- 2025-03-21 06:21:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8315 2025-03-21 07:37:05+00:00| seen| https://t.me/cvedetector/20787 2025-03-21 09:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkuuyoznn...
CVE-2025-30345
An issue was discovered in OpenSlides before 4.2.5. When creating new chats via the chatgroup.create action, the user is able to specify the name of the chat. Some HTML elements such as SCRIPT are filtered, whereas others are not. In most cases, HTML entities are encoded properly, but not when...
CVE-2025-29814
creationtimestamp| type| source ---|---|--- 2025-03-21 02:48:18+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114198137884586801 2025-03-21 02:58:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114198176776904764 2025-03-21 03:14:24+00:00| seen|...
CVE-2024-10441
Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS BSM before 1.1-65374 and Synology DiskStation Manager DSM before 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2025-29814
Technical details about CVE-2025-29814 are not provided in the connected documents. Public information here only notes an elevation of privileges in Microsoft Partner Center; no affected versions, exploit details, or fixes are included. Monitor for updates.
CVE-2025-2574
Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...
CVE-2025-2556
creationtimestamp| type| source ---|---|--- 2025-03-20 18:20:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8249 2025-03-20 21:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxaxcgc26 2025-03-20 21:35:06+00:00| seen| https://t.me/cvedetector/20...
CVE-2025-2555
Audi Universal Traffic Recorder App 2.0 is affected by CVE-2025-2555 due to a hard-coded password in the FTP Credentials component. The issue enables local attack exploitation; attack complexity is high and exploitation is disclosed publicly. Upgrading to version 2.89 (new customers) or 2.90 (exi...
CVE-2025-29914
OWASP Coraza WAF (Go library, modsecurity-compatible) is affected by a parser confusion that yields a wrong REQUEST_FILENAME when the URI starts with //, enabling a potential rules bypass. The issue stems from how the parser maps // URIs to filesystem paths and is fixed in Coraza 3.3.3. Connected...
CVE-2025-2551
creationtimestamp| type| source ---|---|--- 2025-03-20 17:18:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8235 2025-03-20 19:54:27+00:00| seen| https://t.me/cvedetector/20745 2025-03-20 21:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxb2qg...
CVE-2025-29149
Tenda i12 V1.0.0.103805 was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function...
CVE-2025-23120
A vulnerability allowing remote code execution RCE for domain users...
CVE-2025-0453
creationtimestamp| type| source ---|---|--- 2025-03-20 13:03:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr44thbj2w 2025-03-20 13:13:08+00:00| seen| https://t.me/cvedetector/20715 2025-03-20 16:18:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8...
CVE-2025-0315
creationtimestamp| type| source ---|---|--- 2025-03-20 13:03:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr44wthh2n 2025-03-20 13:05:08+00:00| seen| Telegram/0tokKlWnGavu1g5EFwRDRnlGnj7brX6W2ajJgncmBMXjS3Y 2025-03-20 13:13:15+00:00| seen| https://t.me/cvedetector/20720...