CVE-2020-1858

Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability...

CVE-2020-9975

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute...

CVE-2020-13963

SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp which is a guest account...

CVE-2025-37945

In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DSA has 2 kinds of drivers: 1. Those who call dsaswitchsuspend and dsaswitchresume from their device PM ops: qca8k-8xxx, bcmsf2, microchip ksz...

CVE-2020-12926

The Trusted Platform Modules TPM reference software may not properly track the number of times a failed shutdown happens. This can leave the TPM in a state where confidential key material in the TPM may be able to be compromised. AMD believes that the attack requires physical access of the device...

CVE-2020-26292

Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains potential malware. The compromised binary release was available for a few hours between December 26, 2020 at 3:22 PM EST to December 26, 2020 at 11:00 PM EST. If you used the source...

CVE-2025-32815

creationtimestamp| type| source ---|---|--- 2025-05-22 15:48:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114552268477645630 2025-07-13 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lturhz5oen24 2025-07-24 21:02:25+00:00| seen|...

CVE-2020-6622

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...

CVE-2020-35887

An issue was discovered in the arr crate through 2020-08-25 for Rust. There is a buffer overflow in Index and IndexMut...

CVE-2020-7966

GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal...

CVE-2022-3025

creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17291...

CVE-2024-25010

creationtimestamp| type| source ---|---|--- 2025-05-22 10:43:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17263 2025-05-22 12:44:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114551543864334237 2025-05-22 12:45:23+00:00| seen|...

CVE-2019-15534

Raml-Module-Builder 26.4.0 allows SQL Injection in PostgresClient.update...

CVE-2015-9536

The Easy Digital Downloads EDD Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2012-4926

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...

CVE-2011-3731

e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by e107plugins/pdf/e107pdf.php and certain other files...

Forcepoint FIE Endpoint 安全漏洞

Forcepoint FIE Endpoint is a unified endpoint security platform from Forcepoint USA that integrates various Forcepoint agents into a single interface to simplify deployment and management. A security vulnerability exists in Forcepoint FIE Endpoint versions prior to 25.05 that stems from an...

CVE-2025-47942

creationtimestamp| type| source ---|---|--- 2025-05-21 22:11:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114548111014247564 2025-05-22 01:15:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppwwojqjv2j...

CVE-2021-24890

creationtimestamp| type| source ---|---|--- 2025-05-21 19:42:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17176...

CVE-2025-48064 GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure

GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...