CVE-2025-66786

creationtimestamp| type| source ---|---|--- 2026-01-07 17:37:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtyzuvu2y2p 2026-01-07 17:38:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtz2mckw22z 2026-01-07 19:24:00+00:00| seen|...

EUVD-2026-1402

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to Null pointer dereference in CIccProfileXml::ParseBasic, leading to denial of service. This issue has been...

CVE-2026-21506 iccDEV is Vulnerable to Null Pointer Dereference in CIccProfileXml::ParseBasic() Leading to Denial of Service

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to Null pointer dereference in CIccProfileXml::ParseBasic, leading to denial of service. This issue has been...

CVE-2026-21506 iccDEV is Vulnerable to Null Pointer Dereference in CIccProfileXml::ParseBasic() Leading to Denial of Service

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to Null pointer dereference in CIccProfileXml::ParseBasic, leading to denial of service. This issue has been...

CVE-2026-21506

CVE-2026-21506 (iccDEV) concerns a null pointer dereference in CIccProfileXml::ParseBasic() affecting iccDEV versions prior to 2.3.1.2, leading toDenial of Service. The issue is confirmed across multiple sources (Red Hat advisory, NVD entry, CVE records) and is documented as a vulnerability in th...

EUVD-2026-1404

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to stack overflow in the calculator parser. This issue has been patched in version 2.3.1.2...

EUVD-2026-1411

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to division by zero in the TIFF Image Reader. This issue has been patched in version 2.3.1.2...

CVE-2025-32303

creationtimestamp| type| source ---|---|--- 2026-01-07 14:00:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbtmveix5e2q 2026-01-07 14:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtmwblt6m2b 2026-01-07 14:01:27+00:00| seen|...

CVE-2025-69081

creationtimestamp| type| source ---|---|--- 2026-01-07 13:01:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtjlrvbzp2u 2026-01-07 13:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtjmlcieh2b 2026-01-07 13:56:07+00:00| seen|...

CVE-2022-27958

Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information...

CVE-2026-21674

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path iccFromXml. This issue is fixed in version 2.3.1.1...

CVE-2019-12774

A number of stored XSS vulnerabilities have been identified in the web configuration feature in ENTTEC Datagate Mk2 70044update05032019-482 that could allow an unauthenticated threat actor to inject malicious code directly into the application. This affects, for example, the Profile Description...

CVE-2025-68436

Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16, authenticated users on a Craft installation could potentially expose sensitive assets via their user profile photo via maliciously crafted requests. Users should update to the...

CVE-2024-2765

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Skype and Spotify URL parameters in all versions up to, and including, 2.8.4 due to insufficient input...

CVE-2025-1702

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'search' parameter in all versions up to, and including, 2.10.0 due to insufficient escaping on the user suppli...

CVE-2026-21507

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1...

CVE-2024-2299

A stored Cross-Site Scripting XSS vulnerability exists in the parisneo/lollms-webui application due to improper validation of uploaded files in the profile picture upload functionality. Attackers can exploit this vulnerability by uploading malicious HTML files containing JavaScript code, which is...

CVE-2024-2288

A Cross-Site Request Forgery CSRF vulnerability exists in the profile picture upload functionality of the Lollms application, specifically in the parisneo/lollms-webui repository, affecting versions up to 7.3.0. This vulnerability allows attackers to change a victim's profile picture without thei...

CVE-2026-0656

creationtimestamp| type| source ---|---|--- 2026-01-07 08:23:56+00:00| seen| https://gist.github.com/Darkcrai86/4000d364bc9ebc5d554e17b3968dd895 2026-01-07 09:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbt6vbxh2b2e 2026-01-07 10:49:00+00:00| seen|...

CVE-2025-14891

creationtimestamp| type| source ---|---|--- 2026-01-07 06:34:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbstybnach2c 2026-01-07 08:29:47+00:00| seen| https://gist.github.com/Darkcrai86/74a39d52f82e5efa43ff4fc008e58a8e...