CVE-2020-9347

Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the significance of this report because they expect CSV risk mitigation to be provided by an external...

CVE-2020-25059

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A service crash may occur because of incorrect input validation. The LG ID is LVE-SMP-200013 July 2020...

CVE-2020-21733

Sagemcom F@ST3686 v1.0 HUN 3.97.0 has XSS via RgDiagnostics.asp, RgDdns.asp, RgFirewallEL.asp, RgVpnL2tpPptp.asp...

CVE-2025-5077

creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17295 2025-05-22 15:31:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lprgqfjkj52m...

CVE-2018-11773

Apache VCL versions 2.1 through 2.5 do not properly validate form input when processing a submitted block allocation. The form data is then used as an argument to the php built in function strtotime. This allows for an attack against the underlying implementation of that function. The...

CVE-2013-4333

OpenPNE 3 versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 has an External Entity Injection Vulnerability...

CVE-2019-10610

Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2025-48070

creationtimestamp| type| source ---|---|--- 2025-05-21 22:41:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17209 2025-05-22 01:27:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppxlfcpza27...

CVE-2025-44083

creationtimestamp| type| source ---|---|--- 2025-05-21 21:56:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpplreochm2j...

CVE-2025-5007

creationtimestamp| type| source ---|---|--- 2025-05-21 03:13:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpnn27reiq2k...

CVE-2025-31209

creationtimestamp| type| source ---|---|--- 2025-05-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-300/...

CVE-2022-29623

An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report...

GHSA-744G-7QM9-HJH9 The TYPO3 CMS Backend has Broken Authentication in Backend MFA

Problem The multifactor authentication MFA dialog presented during backend login can be bypassed due to insufficient enforcement of access restrictions on all backend routes. Successful exploitation requires valid backend user credentials, as MFA can only be bypassed after successful...

CVE-2025-22157

CVE-2025-22157 is a Privilege Escalation affecting Atlassian Jira Core Data Center and Server (versions 9.12.0, 10.3.0, 10.4.0, 10.5.0) and Jira Service Management Data Center and Server (versions 5.12.0, 10.3.0, 10.4.0, 10.5.0). The flaw allows an attacker to act as a higher-privileged user (CVS...

CVE-2025-37981

creationtimestamp| type| source ---|---|--- 2025-05-20 17:45:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17035 2025-05-20 20:09:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114541968902367001...

GHSA-JQQ5-WC57-F8HJ

creationtimestamp| type| source ---|---|--- 2025-05-20 17:43:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17025 2025-05-20 17:50:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114541423678244181...

CVE-2025-37922

creationtimestamp| type| source ---|---|--- 2025-05-20 16:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lpmjno7sdf2m...

PT-2025-22286 · Intelbras · Intelbras Rf 301K

Name of the Vulnerable Software and Affected Versions: Intelbras RF 301K version 1.1.5 Description: A problematic issue has been found in the component Add Static IP, where the manipulation of the Description argument leads to cross-site scripting. This issue can be exploited remotely...

CVE-2025-4941

creationtimestamp| type| source ---|---|--- 2025-05-19 17:39:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16901 2025-07-15 14:32:44+00:00| seen| https://bsky.app/profile/thezdi.bsky.social/post/3ltz4n3ncak2m...

CVE-2025-4928

creationtimestamp| type| source ---|---|--- 2025-05-19 10:38:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16837 2025-05-19 13:13:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnk5clr2t...