1938 matches found
CVE-2025-32300 WordPress DZS Video Gallery plugin <= 12.25 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital zoom studio DZS Video Gallery allows Reflected XSS.This issue affects DZS Video Gallery: from n/a through 12.25...
CVE-2025-32300
CVE-2025-32300 : Reflected XSS in WordPress plugin DZS Video Gallery (versions
CVE-2025-14112
creationtimestamp| type| source ---|---|--- 2026-01-07 11:19:01+00:00| seen| https://gist.github.com/Darkcrai86/0e619ca8ba174943103a66c20559bd82...
CVE-2025-14719
creationtimestamp| type| source ---|---|--- 2026-01-07 08:28:21+00:00| seen| https://gist.github.com/Darkcrai86/2743e480dc6150b6d27f749a50b270f9 2026-01-07 10:51:41+00:00| seen| https://gist.github.com/Darkcrai86/e24f6927cb477df0a70907605ddbb879...
CVE-2025-13369
creationtimestamp| type| source ---|---|--- 2026-01-07 08:22:25+00:00| seen| https://gist.github.com/Darkcrai86/470e91ab3f188ec717d6da055508a8c4...
PT-2026-1672
Name of the Vulnerable Software and Affected Versions Leica Geosystems GR10/GR25/GR30/GR50 GNSS version 4.30.063 Description The software contains a cross-site request forgery issue that could allow attackers to perform administrative actions without proper validation of requests. Attackers can...
Fujitsu Security Solution AuthConductor Client Basic 访问控制错误漏洞
Fujitsu Security Solution AuthConductor Client Basic is a client component of an authentication system from Fujitsu Japan. An access control error vulnerability exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier versions, which stems from the presence of a sour...
Medium: nodejs24
Issue Overview: Use after free due to connection being cleaned up after error CVE-2025-62408 Affected Packages: nodejs24 Issue Correction: Run dnf update nodejs24 --releasever 2023.10.20260105 or dnf update --advisory ALAS2023-2025-1348 --releasever 2023.10.20260105 to update your system. More...
WordPress和WordPress plugin 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...
CVE-2025-47553 WordPress DZS Video Gallery plugin <= 12.25 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...
CVE-2025-59158
creationtimestamp| type| source ---|---|--- 2026-01-05 19:06:46+00:00| seen| Telegram/-WkPGYxQLne2Z5X7oW7Cjya-7O5zQTo5z5b79nEyipWZqE 2026-01-05 21:28:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpeyzwzut2r 2026-01-06 02:25:15+00:00| seen|...
CVE-2025-30633
creationtimestamp| type| source ---|---|--- 2026-01-05 12:04:18+00:00| seen| Telegram/e-X4ScE1vEPdKuuUEgfhVv-BIPUzPUJYlt0nH6CCEcxyPQ...
CVE-2025-68764
A security bypass vulnerability was found in the Linux kernel's NFS client implementation. When a filesystem is automounted, user-specified security-related mount flags such as "ro" read-only, "noexec" no execution, "nodev" no device files, and "sync" are not properly inherited by the automounted...
Amazon Linux 2 : thunderbird, --advisory ALAS2-2025-3108 (ALAS-2025-3108)
The version of thunderbird installed on the remote host is prior to 140.6.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3108 advisory. Race condition in the Graphics component. This vulnerability affects Firefox 145, Firefox ESR 140.5, and Firefox ESR...
CVE-2025-61321
creationtimestamp| type| source ---|---|--- 2026-01-03 04:02:20+00:00| seen| https://gist.github.com/Professor-mogli/b1d3e5a44cb225ea8ecf5fd51ec149e1...
CVE-2025-68273
creationtimestamp| type| source ---|---|--- 2026-01-01 17:56:49+00:00| published-proof-of-concept| https://github.com/SignalK/signalk-server/security/advisories/GHSA-fpf5-w967-rr2m 2026-01-24 22:43:42+00:00| seen| https://gist.github.com/alon710/1a1e3e884ddf0092d23d25d89f05f39b...
CVE-2025-69413
creationtimestamp| type| source ---|---|--- 2026-01-01 06:33:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbdr54dhkk2y 2026-01-24 22:43:38+00:00| seen| https://gist.github.com/alon710/e078fe3628d5501ec4ccf82f14df37d8...
CVE-2025-67705
creationtimestamp| type| source ---|---|--- 2026-01-01 00:36:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd56v7z2r2c 2026-01-02 18:51:10+00:00| seen| Telegram/jewkuyTggD2PWaKrabPFdcCxroyUzLRM-AR1O-LdmNxSvc...
PT-2026-1167
CVE-2025-22201 - VMware vCenter Server Remote Code Execution CVE ID : CVE-2025-22201 Published : Jan. 1, 2026, 1:15 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 | NA...