The vulnerability of the sub_422eb8() function in Linksys E8450 Wi-Fi router software allows a hacker to execute arbitrary commands.

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogrammed software is related to the lack of measures taken to neutralize special elements used in the operating system’s command processing for handling the wizardstatus parameter. Exploiting this vulnerability...

CVE-2025-25895

creationtimestamp| type| source ---|---|--- 2025-02-18 22:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liiby2pq7x2p 2025-02-19 01:11:13+00:00| seen| https://t.me/cvedetector/18395 2025-02-19 02:11:32+00:00| seen|...

CVE-2025-26616

creationtimestamp| type| source ---|---|--- 2025-02-18 21:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lii6o3h4wy2y 2025-02-18 22:34:38+00:00| published-proof-of-concept| Telegram/4XaNwPTMFyO1Vz7bqzn38wD37G0y60931j9yFHwcc2fnqpY 2025-02-18 22:45:47+00:00| seen|...

CVE-2024-56882

creationtimestamp| type| source ---|---|--- 2025-02-18 18:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihulgftef27 2025-02-18 20:59:50+00:00| seen| https://t.me/cvedetector/18352 2025-02-18 21:56:21+00:00| seen|...

CVE-2024-13797

creationtimestamp| type| source ---|---|--- 2025-02-18 11:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lih53w5h4v2o 2025-02-18 12:38:09+00:00| seen| https://t.me/cvedetector/18319 2025-02-18 13:56:47+00:00| seen|...

CVE-2025-0423

creationtimestamp| type| source ---|---|--- 2025-02-18 08:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligt22k7vq2y 2025-02-18 08:41:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4760 2025-02-18 10:57:36+00:00| seen| https://t.me/cvedetector/18300...

CVE-2024-13848

creationtimestamp| type| source ---|---|--- 2025-02-18 05:17:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligj2azvqe2t 2025-02-18 07:56:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4738 2025-02-18 09:16:50+00:00| seen| https://t.me/cvedetector/18280...

CVE-2025-26771

creationtimestamp| type| source ---|---|--- 2025-02-17 11:58:19+00:00| seen| https://infosec.exchange/users/cve/statuses/114019106732507120 2025-02-17 12:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liepyzl3zt2t 2025-02-17 14:02:17+00:00| seen|...

CVE-2024-54756

creationtimestamp| type| source ---|---|--- 2025-02-17 08:34:31+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3liedme2kf22n 2025-02-17 20:02:02+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lifjzq2s6f2a 2025-02-20 23:16:56+00:00| published-proof-of-concept|...

CVE-2025-1377

creationtimestamp| type| source ---|---|--- 2025-02-17 05:08:14+00:00| seen| https://infosec.exchange/users/cve/statuses/114017494197576565 2025-02-17 05:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidyjdfsbu27 2025-02-17 06:39:27+00:00| seen|...

CVE-2025-22291

creationtimestamp| type| source ---|---|--- 2025-02-16 22:44:16+00:00| seen| https://infosec.exchange/users/cve/statuses/114015984125377397 2025-02-16 23:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidefla7jx23 2025-02-17 00:40:36+00:00| seen|...

CVE-2024-10581 DirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update

The DirectoryPress Frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.9. This is due to missing or incorrect nonce validation on the dpfllistingStatusChange function. This makes it possible for unauthenticated attackers to update...

CVE-2025-22209

CVE-2025-22209 (JS Jobs Joomla plugin) affects JS Jobs plugin versions 1.1.5–1.4.3 for Joomla. The underlying issue is a SQL injection in the Employer Payment History search feature, exploitable by an authenticated administrator via the searchpaymentstatus parameter. Affected component/file: the ...

[SECURITY] Fedora 41 Update: nginx-mod-vts-0.2.3-3.fc41

Nginx virtual host traffic status module...

[SECURITY] Fedora 40 Update: nginx-mod-vts-0.2.3-3.fc40

Nginx virtual host traffic status module...

PT-2025-6498 · WordPress · Directorypress Frontend

Name of the Vulnerable Software and Affected Versions: DirectoryPress Frontend plugin for WordPress versions up to, and including, 2.7.9 Description: The issue is due to missing or incorrect nonce validation on the dpfl listingStatusChange function, making it possible for unauthenticated attacker...

CVE-2024-5462

creationtimestamp| type| source ---|---|--- 2025-02-14 23:51:23+00:00| seen| https://infosec.exchange/users/cve/statuses/114004923571161636 2025-02-15 00:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li6gtk3tnl2h 2025-02-15 01:10:27+00:00| seen|...

WordPress DirectoryPress Frontend plugin <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update vulnerability

Cross-Site Request Forgery to Listing Status Update vulnerability discovered by incognito in WordPress Plugin DirectoryPress Frontend versions = 2.7.9...

GHSA-RMVR-2PP2-XJ38

creationtimestamp| type| source ---|---|--- 2025-02-14 19:40:19+00:00| seen| https://infosec.exchange/users/cve/statuses/114003936429038682...

CVE-2025-25204

gh is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...