19411 matches found
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via the DML component. An attacker can cause the server to hang or crash repeatedly by sending crafted requests over the network. Details Denial of Service DoS describes a family of attacks, all aimed at making a...
Use After Free
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via improper handling of possible socket destruction in P2PSocketTcpBase. An attacker can...
PT-2025-34860
Name of the Vulnerable Software and Affected Versions: Linksys E1700 version 1.0.0.4.003 Description: A stack-based buffer overflow exists in the setWan function of the /goform/setWan file. Manipulation of the DeviceName/lanIp argument causes the overflow, allowing for potential remote code...
SUSE: Security Advisory (SUSE-SU-2025:02275-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-53818
creationtimestamp| type| source ---|---|--- 2025-07-12 10:41:59+00:00| published-proof-of-concept| https://github.com/Sunwood-ai-labs/github-kanban-mcp-server/security/advisories/GHSA-6jx8-rcjx-vmwf...
CVE-2025-52097
creationtimestamp| type| source ---|---|--- 2025-07-11 19:36:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/43703 2025-07-12 03:00:05+00:00| published-proof-of-concept| Telegram/bPSYRFN9kvBfi9BwHVNXk5QOH4G3yeiah-SPugKHJ78tFsA...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the gnutlsfigurecommonciphersuite function. Remediation A fix was pushed into the master branch but not yet published. References - Fix Commit - PoC - Red Hat Bugzilla Bug - Release Notes Credit: Stefan Bühl...
Git 安全漏洞
Git is a free, open source distributed version control system open-sourced by Git. A security vulnerability exists in Git that stems from insufficient validation of published bundles, allowing remote ends to perform protocol injection...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the stack-overflow handler in ljstate.c. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Commit - GitHub Gist - GitHub Issue Credit: Kutyavin Maxim...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the snapunsink function in ljsnap.c.c, which the IRFSTORE process uses when handling a NULL metatable. An attacker can cause the application to crash or become unresponsive by triggering this condition...
WordPress Invico - WordPress Consulting Business Theme Theme <= 1.9 is vulnerable to Cross Site Scripting (XSS)
Software Invico - WordPress Consulting Business Theme Type Theme Vulnerable versions = 1.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31427 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9e4642f9ea67 Credits Tran...
WordPress Uncode Core plugin <= 2.9.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcodes vulnerability discovered by stealthcopter in WordPress Plugin Uncode Core versions = 2.9.4.2...
WordPress Radio Station plugin <= 2.5.12 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Radio Station versions = 2.5.12...
CVE-2025-45081
creationtimestamp| type| source ---|---|--- 2025-07-01 19:09:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20071...
CVE-2025-34052
creationtimestamp| type| source ---|---|--- 2025-07-01 15:08:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20055...
CVE-2025-6901
creationtimestamp| type| source ---|---|--- 2025-06-30 10:07:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19920...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the BigDecimal and BigInteger handling in the MessageSerializer class. An attacker can execute arbitrary code or manipulate application behavior by providing crafted serialized objects. Details...
CVE-2025-45851
creationtimestamp| type| source ---|---|--- 2025-06-27 20:52:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19789...