9437 matches found
CVE-2025-1215
A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...
CVE-2025-25343
creationtimestamp| type| source ---|---|--- 2025-02-12 18:41:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113992381212711969 2025-02-12 19:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyv4sonws2h 2025-02-12 22:19:49+00:00| seen|...
CVE-2025-25205 Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching
Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings lik...
CVE-2025-25199
creationtimestamp| type| source ---|---|--- 2025-02-12 17:52:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992187510032617 2025-02-12 18:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrrbreq52s 2025-02-12 20:14:01+00:00| seen|...
CVE-2025-25198
creationtimestamp| type| source ---|---|--- 2025-02-12 17:52:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992187494675681 2025-02-12 18:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrr7c7jn2s 2025-02-12 20:14:00+00:00| seen|...
CVE-2025-25198 mailcow: dockerized vulnerable to password reset poisoning
mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the Host HTTP header to generate a password reset link pointing to an attacker-controlled domain. This...
CVE-2025-1213
creationtimestamp| type| source ---|---|--- 2025-02-12 17:33:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113992114736691216 2025-02-12 18:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrqzweuo2s 2025-02-12 20:14:01+00:00| seen|...
CVE-2025-0818
creationtimestamp| type| source ---|---|--- 2025-02-12 17:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyofqunhf2x 2025-02-12 17:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyoft4tyv2x 2025-02-12 18:19:50+00:00| seen|...
CVE-2025-25184
CVE-2025-25184 affects Rack (Ruby) where CRLF injection in usernames can be logged by Rack::CommonLogger when credentials are supplied via Rack::Auth::Basic. The issue enables log entry manipulation by including CRLF and whitespace in the username, potentially breaking log formats or injecting fr...
CVE-2025-25351
creationtimestamp| type| source ---|---|--- 2025-02-12 16:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyl4fhqyr2d 2025-02-12 18:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry4skb227 2025-02-12 18:33:22+00:00| seen|...
CVE-2025-26363
creationtimestamp| type| source ---|---|--- 2025-02-12 15:20:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113991591892435093 2025-02-12 15:37:04+00:00| seen| Telegram/-xvFghkm9wAI3OH5CI2F-m8akBasfMJYjd3uJLYtuPd0nF4...
CVE-2025-26362
creationtimestamp| type| source ---|---|--- 2025-02-12 15:20:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113991591877323833 2025-02-12 15:37:04+00:00| seen| Telegram/-xvFghkm9wAI3OH5CI2F-m8akBasfMJYjd3uJLYtuPd0nF4 2025-02-12 15:37:05+00:00| published-proof-of-concept|...
CVE-2025-26353
creationtimestamp| type| source ---|---|--- 2025-02-12 14:50:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113991473713011073...
CVE-2025-26347
creationtimestamp| type| source ---|---|--- 2025-02-12 14:20:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113991355655201744 2025-02-12 14:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991464673823116 2025-02-12 15:09:32+00:00| seen|...
CVE-2024-23563
creationtimestamp| type| source ---|---|--- 2025-02-12 14:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyeeqhynb2z 2025-02-14 10:05:07+00:00| seen| Telegram/TFFqSfT26ZOJtpMQorftKfykRnf9I0bnr-COpikamZRlN54i...
CVE-2025-21695
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...
CVE-2025-26343
creationtimestamp| type| source ---|---|--- 2025-02-12 14:05:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113991296613333448 2025-02-12 14:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991464545930818 2025-02-12 15:09:33+00:00| seen|...
CVE-2025-1101
creationtimestamp| type| source ---|---|--- 2025-02-12 13:27:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113991146930911374...
CVE-2025-1197 code-projects Real Estate Property Management System load_user-profile.php sql injection
A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /parse/loaduser-profile.php. The manipulation of the argument userhash leads to sql injection. The attack c...