ROOT-OS-UBUNTU-2404-CVE-2025-68376 CVE-2025-68376 in rootio-linux - Patched by Root

Root has patched CVE-2025-68376 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

GitHub Scanner for React2Shell (CVE-2025-55182) Turns Out to Be Malware

A GitHub repository posing as a vulnerability scanner for CVE-2025-55182, also referred to as “React2Shell,” was exposed as…...

Cisco CVE-2025-20352 SNMP Exposure Checker

This tool provides a fast and safe black-box exposure check for Cisco IOS/IOS XE devices related to CVE-2025-20352 SNMP vulnerability...

CVE-2025-4907

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2025-4825 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDMZ buffer overflow

A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...

CVE-2025-4531 Seeyon Zhiyuan OA Web Application System Beetl Template EhrSalaryPayrollServiceImpl.class postData code injection

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as critical. Affected by this issue is the function postData of the file ROOT\WEB-INF\classes\com\ours\www\ehr\salary\service\data\EhrSalaryPayrollServiceImpl.class of the component Beetl Template...

CVE-2025-24348

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the wireless network configuration file via a crafted HTTP request...

CVE-2025-3266

A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Affected by this issue is some unknown functionality of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to stack-based buffer overflow. The attack may be launch...

CVE-2025-21921 net: ethtool: netlink: Allow NULL nlattrs when getting a phy_device

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: netlink: Allow NULL nlattrs when getting a phydevice ethnlreqgetphydev is used to lookup a phydevice, in the case an ethtool netlink command targets a specific phydev within a netdev's topology. It takes as a...

CVE-2025-2649

creationtimestamp| type| source ---|---|--- 2025-03-23 14:30:39+00:00| published-proof-of-concept| Telegram/sYUqgCxSdjZu3Wrzmudo9l0u37AiuXWBaqPEBffn6HTuAfI 2025-03-23 15:38:58+00:00| seen| https://t.me/cvedetector/20899 2025-03-23 16:09:21+00:00| seen|...

CVE-2025-29924

creationtimestamp| type| source ---|---|--- 2025-03-19 19:06:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114190659236671973 2025-03-19 20:00:51+00:00| published-proof-of-concept| Telegram/pKc-k4S4UpucBi-A8jZui2WxqHw-KLQAnPldAvhIPnjHqVQ 2025-03-19 20:18:15+00:00|...

CVE-2025-2094

A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launche...

CVE-2024-47898

creationtimestamp| type| source ---|---|--- 2025-01-31 03:19:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113920808283477970 2025-01-31 04:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgz5ahmy5c2c 2025-01-31 05:24:36+00:00| seen|...

CVE-2024-13590

creationtimestamp| type| source ---|---|--- 2025-01-22 04:00:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2514 2025-01-22 04:00:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2514 2025-01-22 04:15:30+00:00| seen|...

CVE-2025-21210

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:17:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpud2edey2j 2025-01-14 18:41:01+00:00| seen|...