CVE-2024-0294

A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619B20230130. Affected by this issue is the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to os command injection. The attack may be launched remotely. T...

CVE-2024-0359

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely...

CVE-2024-8884

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause exposure of credentials when attacker has access to application on network over http...

CVE-2024-35677

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusion.This issue affects MegaMenu: from n/a through 2.3.12...

CVE-2024-13722

creationtimestamp| type| source ---|---|--- 2025-02-04 22:07:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113947890915225546 2025-02-04 22:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf3hjuolo2f 2025-02-05 00:45:45+00:00| seen|...

GHSA-2352-252Q-QC82

creationtimestamp| type| source ---|---|--- 2025-02-04 21:11:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113947671170575758...

CVE-2024-56197

creationtimestamp| type| source ---|---|--- 2025-02-04 21:03:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113947638509402541 2025-02-04 21:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhey472ubi2f 2025-02-04 22:23:46+00:00| seen|...

CVE-2025-22601

creationtimestamp| type| source ---|---|--- 2025-02-04 20:57:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113947614990713817 2025-02-04 21:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhey4e2h7j2t 2025-02-04 22:23:41+00:00| seen|...

GHSA-3327-6X79-Q396

creationtimestamp| type| source ---|---|--- 2025-02-04 19:33:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113947287785542382...

CVE-2025-24971 OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop

DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, /upload/init endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely wh...

CVE-2025-23645

creationtimestamp| type| source ---|---|--- 2025-02-04 15:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhedzo4dwy27 2025-02-04 18:54:27+00:00| seen| https://t.me/cvedetector/17210...

CVE-2025-0825

creationtimestamp| type| source ---|---|--- 2025-02-04 15:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhedyem53k2t...

CVE-2025-20888

creationtimestamp| type| source ---|---|--- 2025-02-04 08:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmjufjk32t...

CVE-2025-20884

creationtimestamp| type| source ---|---|--- 2025-02-04 08:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmjkakj327 2025-02-04 10:32:49+00:00| seen| https://t.me/cvedetector/17175 2025-02-14 10:05:00+00:00| seen|...

CVE-2025-20906

Improper Export of Android Application Components in Settings prior to SMR Feb-2025 Release 1 allows local attackers to enable ADB...

CVE-2025-20889

Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability...

CVE-2024-10239

creationtimestamp| type| source ---|---|--- 2025-02-04 08:09:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113944595962559024 2025-02-04 08:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmj2urnn2f 2025-02-06 02:40:47+00:00| seen|...

CVE-2025-20895

The CVE-2025-20895 affects Samsung Galaxy Store prior to 4.5.87.6. The issue permits authentication bypass via an alternate path in Galaxy Store, enabling a physical attacker to install arbitrary apps and bypass Setupwizard restrictions. Affected: Galaxy Store versions before 4.5.87.6. Root cause...

CVE-2025-20883

CVE-2025-20883 concerns an improper access control flaw in the Samsung SoundPicker component prior to SMR Jan‑2025 Release 1. The root cause is improper access control that allows a physical attacker to access data across multiple user profiles on a device. Reported impact is exposure of data fro...

CVE-2025-24964

creationtimestamp| type| source ---|---|--- 2025-02-04 06:23:12+00:00| published-proof-of-concept| https://github.com/vitest-dev/vitest/security/advisories/GHSA-9crc-q9x8-hgqq 2025-02-04 20:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheur5xdj327 2025-02-04...