CVE-2025-2125 Control iD RH iD PDF Document companyId resource injection

A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects unknown code of the file /v2/report.svc/comprovantemarcacao/?companyId=1 of the component PDF Document Handler. The manipulation of the argument nsr leads to improper control of...

CVE-2025-2121 Thinkware Car Dashcam F800 Pro File Storage access control

A vulnerability classified as critical has been found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected is an unknown function of the component File Storage. The manipulation leads to improper access controls. The attack can only be done within the local network. The exploit has been...

CVE-2025-2114 Shenzhen Sixun Software Sixun Shanghui Group Business Management System Reset Password Interface OperatorStop.asp improper authorization

A vulnerability, which was classified as problematic, has been found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This issue affects some unknown processing of the file /WebPages/Adm/OperatorStop.asp of the component Reset Password Interface. The manipulation of t...

CVE-2025-27840

creationtimestamp| type| source ---|---|--- 2025-03-08 20:39:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljvez3nep22j 2025-03-08 20:41:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6948 2025-03-08 22:00:26+00:00| published-proof-of-concept|...

CVE-2023-52971

CVE-2023-52971 affects MariaDB Server 10.10–10.11.* and 11.0–11.4.*, causing crashes in JOIN::fix_all_splittings_in_plan. Connected advisories (ALAS/ALAS2023-2025-1016) indicate fixes in the 10.11 branch (e.g., 10.11.11-1) and list updated packages; apply the recommended security update to mitiga...

CVE-2025-2095

creationtimestamp| type| source ---|---|--- 2025-03-07 22:35:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6897 2025-03-08 00:58:40+00:00| seen| https://t.me/cvedetector/19861 2025-03-08 02:19:46+00:00| seen|...

CVE-2025-27826

creationtimestamp| type| source ---|---|--- 2025-03-07 22:35:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6894 2025-03-08 00:58:46+00:00| seen| https://t.me/cvedetector/19865 2025-03-08 02:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljthjrao4226 2025-08-16...

CVE-2025-27825

creationtimestamp| type| source ---|---|--- 2025-03-07 22:35:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6893 2025-03-08 00:58:43+00:00| seen| https://t.me/cvedetector/19864 2025-03-08 02:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljthjrmts62e...

CVE-2025-2024 Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visi...

Security Bulletin: IBM Engineering Requirements Management DOORS Next is vulnerable to Target Blank Vulnerability (CVE-2024-39727)

Summary IBM Engineering Requirements Management DOORS Next is vulnerable to Target Blank Vulnerability CVE-2024-39727. Vulnerability Details CVEID:CVE-2024-39727 DESCRIPTION: IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to...

CVE-2024-12975

The CVE-2024-12975 entry concerns a buffer overread in the Silicon Labs CPC application when operating in full duplex SPI after receiving an invalid SPI packet. The provided connected sources indicate the issue arises in the CPC/SiLabs stack and has a low CVSS base score (1.0, LOW) with physical ...

CVE-2024-53695

The CVE-2024-53695 entry concerns QNAP HBS 3 Hybrid Backup Sync. A buffer overflow (boundary error) in the product could, if exploited, allow a remote attacker to modify memory or crash processes. Public references in the provided documents confirm the vulnerability and indicate a fix in HBS 3 Hy...

CVE-2024-50405

CVE-2024-50405 affects QNAP QTS and QuTS hero with CRLF Injection due to improper neutralization of CRLF sequences. Affected products and versions: QTS 5.2.3.3006 build 20250108 and later; QuTS hero h5.2.3.3006 build 20250108 and later. Root cause is improper CRLF sequence handling, enabling a re...

CVE-2025-2087

creationtimestamp| type| source ---|---|--- 2025-03-07 14:38:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6835 2025-03-07 16:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljsfhm5jey2b 2025-03-07 16:37:08+00:00| seen|...

CVE-2024-12650

An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications...

CVE-2025-21838

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal devicedel can lead to new work being scheduled in gadget-work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: devicedel...

CVE-2025-21843

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: avoid garbage value in panthorioctldevquery 'prioritiesinfo' is uninitialized, and the uninitialized value is copied to user object when calling PANTHORUOBJSET. Using memset to initialize 'prioritiesinfo' to avoid th...

CVE-2024-58085

In the Linux kernel, the following vulnerability has been resolved: tomoyo: don't emit warning in tomoyowritecontrol syzbot is reporting too large allocation warning at tomoyowritecontrol, for one can write a very very long line without new line character. To fix this warning, I use GFPNOWARN...

CVE-2024-57490

creationtimestamp| type| source ---|---|--- 2025-03-07 05:17:07+00:00| seen| https://gist.github.com/NaliangzzZ/44bfcc1d9c2cf275d2b6683ca9e20980 2025-03-21 14:19:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8344 2025-03-21 15:58:41+00:00| seen|...

CVE-2025-2060

creationtimestamp| type| source ---|---|--- 2025-03-07 03:34:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6791 2025-03-07 05:00:21+00:00| published-proof-of-concept| Telegram/nPMf5iGG8QkkWH0kZ8hey-bl3Jeh4J7G70yWHlbYzomSOE 2025-03-07 06:00:33+00:00| seen|...