12871 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-25645
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt...
CVE-2025-1938
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firef...
alliance-micro.com Cross Site Scripting vulnerability OBB-4032017
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2025-23515
CVE-2025-23515 corresponds to a Missing Authorization vulnerability in the WordPress plugin ts-tree, affecting ts-tree versions up to 0.1.1. The vulnerability is described as Arbitrary Content Deletion due to insufficient access control (Authenticated/Subscriber+ level). Public data confirms the ...
USN-7314-1 krb5 vulnerabilities
It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. CVE-2024-26458, CVE-2024-26461 It was discovered that Kerberos incorrectly handled certain memory...
CVE-2025-1830
creationtimestamp| type| source ---|---|--- 2025-03-02 20:28:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6109 2025-03-02 22:47:43+00:00| seen| https://t.me/cvedetector/19270 2025-03-02 23:38:59+00:00| seen|...
CVE-2025-22274
It is possible to inject HTML code into the page content using the "content" field in the "Application definition" page. This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not...
CVE-2024-5355
creationtimestamp| type| source ---|---|--- 2025-03-02 11:46:30+00:00| seen| Telegram/B7k3NugwduHhWRR6x9d-Kg1ivDWm9iGZ21Te9vFbpfI8rnH...
[SECURITY] Fedora 41 Update: xorg-x11-server-21.1.16-1.fc41
X.Org X11 X server...
CVE-2025-27400
creationtimestamp| type| source ---|---|--- 2025-02-28 16:27:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5917 2025-02-28 19:32:31+00:00| seen| https://t.me/cvedetector/19174 2025-08-22 13:26:18+00:00| seen| MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80 2026-04-15...
CVE-2025-22274
It is possible to inject HTML code into the page content using the "content" field in the "Application definition" page. This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not...
CVE-2025-22271
CVE-2025-22271 affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The issue allows an attacker to spoof the client’s IP by supplying a value in the X-Forwarded-For header, which degrades accountability of action logging in the application. Other versions are listed as unknown. Pu...
CVE-2025-25725
creationtimestamp| type| source ---|---|--- 2025-02-28 02:45:47+00:00| seen| https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92...
CVE-2025-21817
creationtimestamp| type| source ---|---|--- 2025-02-27 21:58:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6v7yqr6a2w 2025-02-27 23:27:01+00:00| seen| https://t.me/cvedetector/19085 2025-06-19 13:39:55+00:00| published-proof-of-concept|...
CVE-2025-21739
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix use-after free in init error and remove paths devmblkcryptoprofileinit registers a cleanup handler to run when the associated platform- device is being released. For UFS, the crypto private data and pointers...
CVE-2025-21808
In the Linux kernel, the following vulnerability has been resolved: net: xdp: Disallow attaching device-bound programs in generic mode Device-bound programs are used to support RX metadata kfuncs. These kfuncs are driver-specific and rely on the driver context to read the metadata. This means the...
CVE-2022-49078
creationtimestamp| type| source ---|---|--- 2025-02-27 18:27:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5747...
Exploit for CVE-2025-1094
CVE-2025-1094: SQL Injection to RCE via WebSocket 🚀 This repo...
CVE-2025-1295
creationtimestamp| type| source ---|---|--- 2025-02-27 06:24:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5655 2025-02-27 07:48:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114074747530022854 2025-02-27 08:42:05+00:00| seen| https://t.me/cvedetector/19020 2025-02-...