3310 matches found
CVE-2026-0491
creationtimestamp| type| source ---|---|--- 2026-01-13 03:02:15+00:00| seen| Telegram/gzP7g7M5unxqeE0obsD0sG4W6mS1OWin9PANHO7snP8yfs 2026-01-13 06:48:14+00:00| seen| https://vulnerability.circl.lu/bundle/79cf05e4-8e7e-4859-b145-d69bffb52412 2026-01-13 07:01:37+00:00| seen|...
CVE-2025-50334
creationtimestamp| type| source ---|---|--- 2026-01-08 16:42:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860473488145891 2026-01-08 20:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwrl2am6i2a...
CVE-2025-10569
creationtimestamp| type| source ---|---|--- 2026-01-08 14:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbw66qsi4d2u 2026-01-09 11:04:06+00:00| seen| Telegram/IU-GZhw3lwdB2YPQBPPJszhGuDqQLNcVlkfgMniUsf5QLI 2026-01-09 13:16:41+00:00| seen|...
CVE-2025-69169
creationtimestamp| type| source ---|---|--- 2026-01-08 10:26:46+00:00| seen| https://gist.github.com/Darkcrai86/9069e8978daf1e2d78679525d48adbfa 2026-01-08 13:03:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbw26h2qjg2x...
CVE-2026-0697
The CVE-2026-0697 entry concerns code-projects Intern Membership Management System 1.0. A flaw in /intern/admin/edit_admin.php arises from manipulating the admin_id argument, causing an SQL injection vulnerability. The issue can be exploited remotely, and published exploits exist. Multiple connec...
CVE-2026-21682
creationtimestamp| type| source ---|---|--- 2026-01-07 21:47:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbugyrfjog2e 2026-01-07 22:11:38+00:00| seen| Telegram/jO7QlYrwcf3hjfx3ScBgpS7153MfwFyypIrzpKferFw0p6I...
CVE-2025-14022
creationtimestamp| type| source ---|---|--- 2026-01-07 17:07:51+00:00| seen| Telegram/S7e73uQGRz2g4329uFgFshdmbcpucfN1UlxU6fp487LZwx8...
WordPress AA Block country plugin <= 1.0.1 - Unauthenticated IP Address Spoofing via X-Forwarded-For Header vulnerability
Unauthenticated IP Address Spoofing via X-Forwarded-For Header vulnerability discovered by Ivan Cese in WordPress Plugin AA Block country versions = 1.0.1...
mingw packages security and bug fix update
An update is available for mingw-binutils, mingw-bzip2, mingw-sqlite. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MinGW is a free and open source software...
CVE-2025-14524
creationtimestamp| type| source ---|---|--- 2026-01-07 06:21:41+00:00| seen| https://seclists.org/oss-sec/2026/q1/33 2026-01-07 07:51:28+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/115852724607348302 2026-01-07 08:11:17+00:00| seen|...
CVE-2025-15198
creationtimestamp| type| source ---|---|--- 2026-01-05 22:07:24+00:00| seen| Telegram/Ue9D88akPtcSqJqcQnzdsM4jMnd7f4RtTY-JP7TQys-dy8...
CVE-2025-64121
Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Authentication Bypass.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...
CVE-2025-15407
creationtimestamp| type| source ---|---|--- 2026-01-01 18:28:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbez2vrux42y 2026-01-02 18:52:25+00:00| published-proof-of-concept| Telegram/frMBNFr4dxsb7OolQ--BQHkgd4kUrm0gGJMdqCQX5AgtUdY 2026-01-02 21:54:16+00:00|...
BELL-CVE-2023-54225
Bulletin has no description...
CVE-2025-65411
creationtimestamp| type| source ---|---|--- 2025-12-30 22:22:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbaf7mkmkv2y 2026-01-02 21:53:17+00:00| seen| Telegram/JxPXMxRS9I7Z3kYw2DwOkNmPXjWNfhlFmYgdz0OY1MqXE...
CVE-2025-15065
creationtimestamp| type| source ---|---|--- 2025-12-29 01:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb3q2nez3b2o...
CVE-2025-15125 JeecgBoot queryDepartPermission improper authorization
A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartPermission of the file /sys/permission/queryDepartPermission. The manipulation of the argument departId results in improper authorization. The attack can be launched remotely. This attack is...
CVE-2025-54322
XSpeeder SXZOS firmware (CVE-2025-54322) is affected. The vulnerability resides in the Django-based web interface where unsafe use of Python eval() on base64-decoded input from the chkid parameter (along with title and oIP) enables unauthenticated remote code execution with root privileges. Affec...