1701 matches found
CVE-2025-20783
creationtimestamp| type| source ---|---|--- 2026-01-06 15:03:37+00:00| seen| Telegram/DnjG3cjOf3mgRqCDQktUB9ySFlLQqpKZbunf1nrr4pA4vR8...
CVE-2025-15001 FS Registration Password <= 1.0.1 - Unauthenticated Privilege Escalation via Account Takeover
The FS Registration Password plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticate...
CVE-2025-14996 AS Password Field In Default Registration Form <= 2.0.0 - Unauthenticated Privilege Escalation via Account Takeover
The AS Password Field In Default Registration Form plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it...
CVE-2025-69226
creationtimestamp| type| source ---|---|--- 2026-01-06 00:03:31+00:00| published-proof-of-concept| Telegram/pBIBejJY22UGYFBeCviRWB0sbqSJQWVhrb4WN5JzMLlOPk 2026-01-06 01:08:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbprchyhg72u 2026-01-19 22:03:49+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2025-69229
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling of chunked messages can result in excessi...
CVE-2025-15198
creationtimestamp| type| source ---|---|--- 2026-01-05 22:07:24+00:00| seen| Telegram/Ue9D88akPtcSqJqcQnzdsM4jMnd7f4RtTY-JP7TQys-dy8...
CVE-2025-55204
creationtimestamp| type| source ---|---|--- 2026-01-05 18:21:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbp2ky5zo42t 2026-01-05 19:06:38+00:00| published-proof-of-concept| Telegram/fMtvesIEGvLKzgXVr04EQ2rBgwnPRUk0FUIDqd1543CWh4 2026-01-05 21:44:39+00:00| seen|...
CVE-2025-68014
creationtimestamp| type| source ---|---|--- 2026-01-05 12:04:43+00:00| seen| Telegram/FJfvlX6TJSCXc1BtMj7gCg6lNkfEneTzrRac5rNLNVtLDk...
CVE-2025-31044
creationtimestamp| type| source ---|---|--- 2026-01-05 12:04:18+00:00| seen| Telegram/e-X4ScE1vEPdKuuUEgfhVv-BIPUzPUJYlt0nH6CCEcxyPQ...
CVE-2025-68763
In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sgnentsforlen The return value of sgnentsforlen was assigned to an unsigned long in starfivehashdigest, causing negative error codes to be converted to large positive integers. Add...
CVE-2025-68757
In the Linux kernel, the following vulnerability has been resolved: drm/vgem-fence: Fix potential deadlock on release A timer that expires a vgem fence automatically in 10 seconds is now released with timerdeletesync from fence-ops.release called on last dmafenceput. In some scenarios, it can run...
CVE-2025-68752
A NULL pointer dereference vulnerability was found in the Intel Adaptive Virtual Function iavf network driver in the Linux kernel. The driver registers a PTP clock device but does not implement the settime64 callback. When ptpclocksettime is called, it assumes the callback exists and dereferences...
CVE-2025-64124
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...
CVE-2025-64119
CVE-2025-64119 : A vulnerability in the Nuvation Battery Management System allows authentication bypass, affecting BMS versions up to 2.3.9. The entry is supported by other sources (Red Hat/EUVD) with the same description. The CVSSv4 metrics indicate critical impact (base score 9.3) across confid...
CVE-2025-67442
creationtimestamp| type| source ---|---|--- 2026-01-02 18:48:41+00:00| published-proof-of-concept| Telegram/SIlHdnSWOhxtT164bo5OUY813qzBPWb650GYgkhFr1n0D8 2026-01-02 21:52:17+00:00| published-proof-of-concept| Telegram/mK8o9C1rhrHkVcM37GZHvLPW6XA5mG-AmvsJea-RQorcPsU...
CVE-2025-15411
creationtimestamp| type| source ---|---|--- 2026-01-01 22:38:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbfh2b5fcd2q...
CVE-2025-15390
creationtimestamp| type| source ---|---|--- 2026-01-01 21:00:06+00:00| published-proof-of-concept| Telegram/xCydJOaZlf8MlIebkeB8NCAUqKbjQ7jZ0mNWvn9tC1vBEg...
CVE-2025-68273
creationtimestamp| type| source ---|---|--- 2026-01-01 17:56:49+00:00| published-proof-of-concept| https://github.com/SignalK/signalk-server/security/advisories/GHSA-fpf5-w967-rr2m 2026-01-24 22:43:42+00:00| seen| https://gist.github.com/alon710/1a1e3e884ddf0092d23d25d89f05f39b...
WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability
Software : Gecko Type : Theme Vulnerable versions : = 1.9.8 OWASP Top 10 : A3: Injection Classification : Local File Inclusion CVE ID : CVE-2025-69080 Patchstack priority : High CVSS severity : 8.1 Required privilege : Unauthenticated Developer : Claim ownership PSID : 0d458b5a65e6 Credits : Tran...