CVE-2025-25526

creationtimestamp| type| source ---|---|--- 2025-02-11 20:16:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwi2uferw2p 2025-02-11 21:12:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3922 2025-02-12 00:04:19+00:00| seen|...

CVE-2025-21386

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:18:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbgbpmdj2a 2025-02-11 20:19:24+00:00| seen|...

CVE-2025-21390

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:18:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbgha4uj2z 2025-02-11 20:19:24+00:00| seen|...

CVE-2025-21259

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:17:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbemfveo2a 2025-02-11 19:04:16+00:00| seen|...

CVE-2025-21126

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service...

CVE-2025-22467

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution...

CVE-2025-1178

creationtimestamp| type| source ---|---|--- 2025-02-11 06:34:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113983859707016505 2025-02-11 07:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhv4g72q6w2h 2025-02-11 08:19:51+00:00| seen|...

CVE-2023-3437

creationtimestamp| type| source ---|---|--- 2025-02-11 02:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulogsbop2x...

CVE-2024-48170

creationtimestamp| type| source ---|---|--- 2025-02-10 17:41:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113980818569878994 2025-02-10 18:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtqte25ux23...

CVE-2025-21688

creationtimestamp| type| source ---|---|--- 2025-02-10 16:16:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtk5w7q2j2o 2025-02-10 18:45:39+00:00| seen| https://t.me/cvedetector/17566 2025-02-10 20:10:09+00:00| seen|...

CVE-2025-25111 WordPress WP Spell Check plugin <= 9.21 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Cross Site Request Forgery.This issue affects WP Spell Check: from n/a through = 9.21...

WordPress plugin URL-Preview-Box 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2022-40916

creationtimestamp| type| source ---|---|--- 2025-02-06 16:42:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113957939424564643 2025-02-06 17:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlms7cys2s 2025-02-07 22:03:04+00:00|...

CVE-2021-35105

Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2017-1263

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:53+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2025-21571

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.24 and prior to 7.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2025-0994

Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Microsoft Internet Information Services I...

CVE-2022-36339

Improper input validation in firmware for IntelR NUC 8 Compute Element, IntelR NUC 11 Compute Element, IntelR NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access...

CVE-2022-36076

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conditional in the code handling the first step of the SSO process, the pre-existing logic that added and later checked a nonce was inadvertently rendered opt-i...

CVE-2022-36010

This library allows strings to be parsed as functions and stored as a specialized component, JsonFunctionValue. To do this, Javascript's eval function is used to execute strings that begin with "function" as Javascript. This unfortunately could allow arbitrary code to be executed if it exists as ...