CVE-2019-10528

Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206,...

CVE-2010-4618

Cross-site scripting XSS vulnerability in the Algis Info aiContactSafe component before 2.0.14 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Vehicular Intrusion Detection System for Controller Area Network: a Comprehensive Survey and Evaluation

The progress of automotive technologies has made cybersecurity a crucial focus, leading to various cyber attacks. These attacks primarily target the Controller Area Network CAN and specialized Electronic Control Units ECUs. In order to mitigate these attacks and bolster the security of vehicular...

CVE-2004-1795

Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI...

CVE-2004-1780

Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts...

CVE-2005-2038

Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page...

CVE-2025-41232

creationtimestamp| type| source ---|---|--- 2025-05-21 12:26:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114545810980701001 2025-05-21 14:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpotlbcb4m2l 2025-05-21 18:25:34+00:00| seen|...

CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

CVE-2025-44884

CVE-2025-44884 affects Planet FW-WGS-804HPT firmware v1.305b241111. The vulnerability is a stack overflow in the web_sys_infoContact_post function caused by improper input length validation, with the CNVD/CNNVD entries describing potential arbitrary code execution or denial of service. Public det...

Malicious code in os-info-checker-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7d48d1ef01f6c43c34237496128c5593e34836a51db6b931a38f9d1520562c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4013 Malicious code in os-info-checker-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7d48d1ef01f6c43c34237496128c5593e34836a51db6b931a38f9d1520562c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

1000 Projects Daily College Class Work Report Book 注入漏洞

1000 Projects Daily College Class Work Report Book is an open source college class work report book by 1000 Projects. An injection vulnerability exists in 1000 Projects Daily College Class Work Report Book version 1.0, which originates from SQL injection due to the operation of the parameter batc...

CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI E-UTRAN Cell Identity leak. The Cell ID might be usable to...

CVE-2025-48219

O2 UK prior to 2025-05-19 exposes a vulnerability where an IMS call lets a subscriber read the utran-cell-id-3gpp (ECI) from the Cellular-Network-Info SIP header, potentially enabling crowdsourced cell-location inference. The issue concerns O2 UK VoLTE/IMS behavior and references ETSI TS 124 229 ...

OESA-2025-1516 mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs a...

Projectworlds Hospital Database Management System 注入漏洞

Projectworlds Hospital Database Management System is a hospital database management system from Projectworlds India. An injection vulnerability exists in Projectworlds Hospital Database Management System version 1.0, which stems from improper handling of the parameter MedID in the file...

GHSA-C8HM-H9GV-8JPJ

creationtimestamp| type| source ---|---|--- 2025-05-14 15:26:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114506885070033703...

Alibaba Cloud Linux 3 : 0056: nodejs:14 (ALINUX3-SA-2021:0056)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0056 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-22918: Node.js before 16.4.1,...

CVE-2025-30322

creationtimestamp| type| source ---|---|--- 2025-05-13 18:37:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114501971768097313 2025-05-13 20:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eae6sgl2o 2025-05-13 21:24:39+00:00| seen| https://t.me/cvedetector/252...