550 matches found
CVE-2025-27234
Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. In Zabbix 5.0 this allows for remote code execution...
CVE-2025-40690
creationtimestamp| type| source ---|---|--- 2025-09-11 12:35:42+00:00| seen| https://gist.github.com/Darkcrai86/f49e5ffff1c3ff0e98479219d5f2e1b6 2025-09-11 13:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lykuquscd22i 2025-09-12 06:01:33+00:00| seen|...
CVE-2025-7491
creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:39+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...
WordPress Drone Media Theme <= 2.2.0 is vulnerable to Local File Inclusion
Software Drone Media Type Theme Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID eedad8a1091f Credits Bonds Required privilege Unauthenticated...
CVE-2025-39676
In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxxgetepfwdb function is supposed to return NULL on error, but qla4xxxepconnect returns error pointers. Propagating the error pointers will lead to an Oops in t...
CVE-2025-41030
creationtimestamp| type| source ---|---|--- 2025-09-02 13:22:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxu7li4y3k2v...
CVE-2025-9755
creationtimestamp| type| source ---|---|--- 2025-09-01 05:20:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxqu5cdqn72j...
CVE-2025-34520
creationtimestamp| type| source ---|---|--- 2025-08-28 15:21:52+00:00| seen| Telegram/s7Iu9fS-Whi-uZZkiAJ1F8204U8xAyiylQQUTKKuDgURnxs...
WordPress Vibes plugin <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter vulnerability
Unauthenticated SQL Injection via resource Parameter vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Vibes versions = 2.2.0...
The Biosig Project libbiosig RHS2000 parsing heap-based buffer overflow vulnerability
Talos Vulnerability Report TALOS-2025-2240 The Biosig Project libbiosig RHS2000 parsing heap-based buffer overflow vulnerability August 25, 2025 CVE Number CVE-2025-48005 SUMMARY A heap-based buffer overflow vulnerability exists in the RHS2000 parsing functionality of The Biosig Project libbiosig...
CVE-2025-38743
creationtimestamp| type| source ---|---|--- 2025-08-21 22:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwwy7xvpzt2q...
CVE-2025-9330
creationtimestamp| type| source ---|---|--- 2025-08-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-870/ 2025-09-03 01:17:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvhisomd22a...
CVE-2025-8943
creationtimestamp| type| source ---|---|--- 2025-08-20 20:44:15+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lwuc6m7cas2n 2025-11-11 21:02:41+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m5ezvqjorh2l 2025-11-22 21:02:35+00:00| seen|...
CVE-2025-4046
creationtimestamp| type| source ---|---|--- 2025-08-19 18:07:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwriyaalep2u...
Linux Distros Unpatched Vulnerability : CVE-2017-15868
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bnepaddconnection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows loca...
WordPress Real Spaces Theme <= 3.5 is vulnerable to Privilege Escalation
Software Real Spaces Type Theme Vulnerable versions = 3.5 Fixed in 3.6 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2025-8218 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID dbcfbeba0421 Credits Alyudin Nafiie...
Linux Distros Unpatched Vulnerability : CVE-2021-22237
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if impersonation is disabled. This vulnerability i...
Linux Distros Unpatched Vulnerability : CVE-2021-38297
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is use...