HEXAGreen CMS SQL Injection

HEXAGreen CMS suffers from a remote SQL injection vulnerability. This software does not offer any version associated with it. Title: HEXAGreen CMS - Authenticated SQLi Description: HEXAGreen CMS authenticated error-based sql injection Source URL: http://ezcode.pt/tests/hexagreen/admin/ Source...

CVE-2025-27652

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: rfIDEAS V-2023-015...

CVE-2025-27684

Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003...

CVE-2025-27671

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Device Impersonation OVE-20230524-0015...

CVE-2025-27685

Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001...

CVE-2025-27643

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006...

CVE-2025-27650

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Private Keys in Docker Overlay V-2023-013...

Linux Distros Unpatched Vulnerability : CVE-2023-49347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a...

CVE-2025-27111

creationtimestamp| type| source ---|---|--- 2025-03-04 15:31:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6370 2025-03-04 18:21:13+00:00| seen| https://t.me/cvedetector/19514 2025-04-25 17:17:07+00:00| seen| https://bsky.app/profile/aakl.bsky.social/post/3lnnq2hje5s2y 2025-04-26...

Linux Distros Unpatched Vulnerability : CVE-2020-22669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Modsecurity owasp-modsecurity-crs 3.2.0 Paranoia level at PL1 has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable...

Linux Distros Unpatched Vulnerability : CVE-2014-3188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers...

CVE-2025-27554

ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to execute arbitrary commands on the build server e.g., read secrets from the desktopify config.prod.json file, and consequently deploy updates to any app, via a postinstall script in...

CVE-2025-22624 FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry and Carousel 2.4.29 - Reflected cross-site scripting (XSS)

FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry and Carousel 2.4.29 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/extensions/albums/admin/class-meta boxes.php...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, govulncheck, kube-bench, kind, terraform, metallb, k8ssandra-operator, external-secrets-fips, kube-oidc-proxy, argo-workflows, fulcio-fips, gomplate, kpt, kube-state-metrics-fips, petname, prometheus-elasticsearch-exporter, aws-flb-cloudwatch,...

CVE-2025-1618

creationtimestamp| type| source ---|---|--- 2025-02-24 05:21:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5127 2025-02-24 08:09:18+00:00| seen| https://t.me/cvedetector/18784 2025-02-24 08:37:37+00:00| seen|...

CVE-2025-1593

creationtimestamp| type| source ---|---|--- 2025-02-23 20:22:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5101 2025-02-23 23:33:50+00:00| seen| https://t.me/cvedetector/18756 2025-02-24 00:28:00+00:00| seen|...

CVE-2025-1447

creationtimestamp| type| source ---|---|--- 2025-02-19 03:09:26+00:00| seen| Telegram/eVW0SDeapKbyz3DaIi28cB3jh41KTy7RDpdKBCqZ8gmHSfgB 2025-02-19 03:41:39+00:00| seen| https://t.me/cvedetector/18397 2025-02-19 04:01:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liivcbgabk2m...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.103003)

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.103003 advisory. - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overfl...

CVE-2024-57964

creationtimestamp| type| source ---|---|--- 2025-02-18 07:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligpocwctl2k 2025-02-18 08:09:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4756 2025-02-18 10:57:51+00:00| seen| https://t.me/cvedetector/18312...

F5 BIG-IP Uncontrolled Resource Consumption Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An uncontrolled resource consumption vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to cause a denia...