59162 matches found
CVE-2020-36967
creationtimestamp| type| source ---|---|--- 2026-01-28 18:03:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiubye7lc2j...
CVE-2020-36967 Zortam Mp3 Media Studio 27.60 - Remote Code Execution (SEH)
Zortam Mp3 Media Studio 27.60 contains a buffer overflow vulnerability in the library creation file selection process that allows remote code execution. Attackers can craft a malicious text file with shellcode to trigger a structured exception handler SEH overwrite and execute arbitrary commands ...
CVE-2025-68869
creationtimestamp| type| source ---|---|--- 2026-01-28 17:20:11+00:00| seen| Telegram/yXy36TX-l3HHyr8aIHw3JdopJLK3nb5QySa9H1H0VzeiNQU...
CVE-2025-68866
creationtimestamp| type| source ---|---|--- 2026-01-28 17:19:48+00:00| seen| Telegram/x5aBA7R5rQvFrXMcIxuXWfY4mfdygo1gp5m9jcmxf38Xg...
CVE-2025-47387
creationtimestamp| type| source ---|---|--- 2026-01-28 17:19:41+00:00| seen| Telegram/5npACM53Kf9UURHm2JFwLz04ReSl39d2Z8EOnhHwBxlZ2m4...
CVE-2025-32309
creationtimestamp| type| source ---|---|--- 2026-01-28 17:19:19+00:00| seen| Telegram/u0g06F7rkhyI5ynLIq5wWbky3L-t-8BaDYPchO8eRxpEz8...
CVE-2025-70336
A Stored cross-site scripting XSS vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbitrary script or HTML via the 'TITLE', 'SHORT DESCRIPTION' and 'LONG DESCRIPTION' parameters. The saved payload gets executed on 'View All Live Items' and 'Live...
CVE-2025-69517
An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content during the creation of a new agent via the POST /api/v3/newagent/ endpoint. The agentid parameter accepts up to 255 characters and is improperly sanitized...
kernel: KVM: arm64: Tear down vGIC on failed vCPU creation
A use-after-free flaw was found in KVM for arm64 in the Linux Kernel, if the kvmarchvcpucreate fails to share the vCPU page with the hypervisor. This vulnerability could even lead to a kernel information leak problem...
CVE-2025-59891
creationtimestamp| type| source ---|---|--- 2026-01-28 14:34:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiilnxkps2g...
CVE-2020-36985
creationtimestamp| type| source ---|---|--- 2026-01-28 14:00:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdigokf5ls2m...
CVE-2025-14386
creationtimestamp| type| source ---|---|--- 2026-01-28 13:02:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdidhiugzx2h 2026-01-28 14:29:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiicpjffi2m...
CVE-2026-1280
creationtimestamp| type| source ---|---|--- 2026-01-28 13:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdiddmln2x25...
CVE-2025-59891
Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...
CVE-2025-59891
Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...
CVE-2025-59891 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server
Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...
CVE-2025-59891
CVE-2025-59891 is a CSRF vulnerability affecting Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. The root cause is lack of proper CSRF token handling, enabling an authenticated attacker to coerce other users to perform actions in the app (e.g., via POST to /setup_login?...
CVE-2026-24739
creationtimestamp| type| source ---|---|--- 2026-01-28 11:10:29+00:00| seen| https://bsky.app/profile/symfony.com/post/3mdi56unoj726 2026-01-28 15:35:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mdilxzeb3h2j...
CVE-2025-40551
creationtimestamp| type| source ---|---|--- 2026-01-28 10:02:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdhzegua562m 2026-01-28 10:04:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdhzi6koa42c 2026-01-28 13:21:55+00:00| seen|...