12869 matches found
CVE-2025-2094
A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launche...
CVE-2025-27670
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Signature Validation OVE-20230524-0014...
WordPress plugin Flexmls IDX Plugin 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...
CVE-2025-20929
Out-of-bounds write in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code...
CVE-2025-25012
creationtimestamp| type| source ---|---|--- 2025-03-06 04:35:53+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ljoo73xra22j 2025-03-06 06:11:01+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3ljotjeyg422l 2025-03-06 11:33:00+00:00| seen|...
Medium: openssl
Issue Overview: Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring...
SAMSUNG Watch 安全漏洞
SAMSUNG Watch is a smartwatch from Samsung South Korea. A security vulnerability exists in SAMSUNG Watch versions prior to SMR Mar-2025 Release 1, which stems from a default permission error that could allow a local attacker to access data in the Galaxy Watch Gallery...
CVE-2025-25362
creationtimestamp| type| source ---|---|--- 2025-03-05 20:36:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6613 2025-03-05 23:39:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5nlello2h 2025-03-06 01:18:24+00:00| seen|...
CVE-2025-23502
creationtimestamp| type| source ---|---|--- 2025-03-05 18:30:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6570...
CVE-2025-23496
creationtimestamp| type| source ---|---|--- 2025-03-05 18:30:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6568...
CVE-2025-27665
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Antivirus Protection and thus drivers can have known malicious code OVE-20230524-0009...
CVE-2025-27655
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: CPA v1 V-2023-009...
Linux Distros Unpatched Vulnerability : CVE-2023-52798
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix dfs radar event locking The ath11k active pdevs are protected by RCU but t...
Linux Distros Unpatched Vulnerability : CVE-2022-46280
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted...
Linux Distros Unpatched Vulnerability : CVE-2022-24805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of...
Vasion Print 信息泄露漏洞
Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print versions prior to 22.0.843 Application 20.0.1923 that stems from a flaw in the OpenID implementation...
Linux Distros Unpatched Vulnerability : CVE-2020-25645
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt...
Linux Distros Unpatched Vulnerability : CVE-2022-49498
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Check for null pointer of pointer substream before dereferencing it Pointer...
CVE-2025-1938
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firef...