19519 matches found
CVE-2025-22414
In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-41059
creationtimestamp| type| source ---|---|--- 2025-09-04 11:27:21+00:00| seen| Telegram/zqvHZYMjk1bf1o6p3kGIyE85BeceV-d-lKfA8voWJ2PtMQ...
CVE-2024-43115
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...
CVE-2024-43115
Apache DolphinScheduler is vulnerable to Remote Code Execution (RCE) due to improper input validation within the alert script check. An authenticated user can submit crafted input to execute arbitrary shell commands on the server. This issue affects versions prior to 3.2.2 . Remediation requires ...
CVE-2024-43115 Apache DolphinScheduler: Alert Script Attack
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...
CVE-2024-43115 Apache DolphinScheduler: Alert Script Attack
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...
org.apache.dolphinscheduler:dolphinscheduler-alert-all (>=3.2.0, <=3.2.1), org.apache.dolphinscheduler:dolphinscheduler-alert-server (>=2.0.1, <=3.2.1) +2 more potentially affected by CVE-2024-43115 via org.apache.dolphinscheduler:dolphinscheduler-alert-script (>=2.0.1, <=3.2.1)
org.apache.dolphinscheduler:dolphinscheduler-alert-script MAVEN version =2.0.1, =3.2.0, =2.0.1, =2.0.1, =2.0.1, =3.0.6 Source cves: CVE-2024-43115 Source advisory: MEND:CVE-2024-43115...
PT-2025-35703
Name of the Vulnerable Software and Affected Versions: Apache DolphinScheduler versions prior to 3.2.2 Description: An authenticated user can execute any shell script on the server through the alert script functionality due to improper input validation. Recommendations: Upgrade to version 3.3.1...
Release Information for Veeam ONE 13.0.1 Patch 1
Veeam ONE 13 Releases 13.0.2.6723 2026-05-27 What's New New Features and Improvements Suspicious Incremental Backup Size Alarm -- Extended Platform Support The Suspicious Incremental Backup Size alarm now covers all platforms supported in Veeam ONE v13, including Proxmox VE, oVirt KVM Oracle Linu...
CVE-2025-45805
creationtimestamp| type| source ---|---|--- 2025-09-02 20:16:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/50029 2025-09-03 03:00:07+00:00| seen| Telegram/cHcofYq5yVH7DLc69hIcAd2SE1E77x3v0sMIcSbMCujGDRo 2025-09-03 03:00:12+00:00| published-proof-of-concept|...
CVE-2025-9813
creationtimestamp| type| source ---|---|--- 2025-09-02 04:32:20+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxtbwn3wfm2n 2025-09-02 08:40:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxtpsibvkt27 2026-08-14 16:00:06+00:00| seen| https://t.me/purpsec/1070...
CVE-2025-48363
Cross-Site Request Forgery CSRF vulnerability in Metin Saraç Popup for CF7 with Sweet Alert cf7-sweet-alert-popup allows Cross Site Request Forgery.This issue affects Popup for CF7 with Sweet Alert: from n/a through = 1.6.5...
RHSA-2023:5095
creationtimestamp| type| source ---|---|--- 2025-08-30 12:19:50+00:00| seen| Telegram/80A1eyoWoPGSiDEp1L8hDgFCJP41VDr32O2TwZCuIF-1jM...
RHSA-2023:5758
creationtimestamp| type| source ---|---|--- 2025-08-30 08:23:02+00:00| seen| Telegram/E7kq5irfw2-NnR1TZZjTmeqx483hOvXEhMeNyQmnvthnxzg...
CVE-2023-5764
creationtimestamp| type| source ---|---|--- 2025-08-30 08:22:56+00:00| seen| Telegram/dUlaSIsUWUiqiseKOPit5pxMhUG0DydGzU1OdGJljXTSUo...
RHSA-2023:5396
creationtimestamp| type| source ---|---|--- 2025-08-30 05:19:22+00:00| seen| Telegram/z7CYhrJnplaLHLQrVZkfCCCObyPnB5ATj7M98dxLHmaLocQ 2025-08-30 05:19:26+00:00| seen| Telegram/eDBwHwYH6KGV4398TKRRnto7VWDNNwIC6NshKq-OfqsZ3g 2025-09-02 14:27:08+00:00| seen|...
RHSA-2023:7139
creationtimestamp| type| source ---|---|--- 2025-08-30 02:22:26+00:00| seen| Telegram/swvvDBr4sLUJpO-Mf1lDD-RcBF5rVCeCsgITXhhnfHg5hTU 2025-08-30 05:19:18+00:00| seen| Telegram/IyktYvz2ZXSoln-Xw9gf7lHEpCZ8IZsKAFgChoCz0-9C5M 2025-08-30 05:19:19+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2019-18792
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature by overlapping a TCP segment with a fake FIN packet. The fake...
Linux Distros Unpatched Vulnerability : CVE-2019-13455
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of expansion in acknowledge.c...
