318 matches found
CVE-2025-49199
The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable...
CVE-2025-47117
creationtimestamp| type| source ---|---|--- 2025-06-11 02:09:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcda6dasr2m...
CVE-2025-47962
Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally...
CVE-2025-4275
creationtimestamp| type| source ---|---|--- 2025-06-10 15:00:07+00:00| published-proof-of-concept| Telegram/8EUjxo2TKnaloL5sHaUwdkIT6hd-NYIBKLtGdVmZMYPI04s 2025-06-10 21:39:32+00:00| seen| https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lrbu63qcab2t 2025-06-10 22:53:44+00:00| seen|...
CVE-2025-5694
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack ma...
CVE-2025-46258
creationtimestamp| type| source ---|---|--- 2025-06-05 18:54:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquylr3voa2r...
CVE-2025-0325
A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of the Axis device...
PT-2025-23362 · Undefined · Undefined
CVE-2025-48874 Rejected reason https://t.co/6JBZG1BlPO...
CVE-2025-48292
creationtimestamp| type| source ---|---|--- 2025-05-23 14:58:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptvecznnh2m...
CVE-2024-22809
Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27861
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory...
CVE-2024-48703
PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/search-medicalcard.php via the searchdata parameter...
CVE-2024-34732
In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-40405
Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...
CVE-2023-40292
Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets...
CVE-2023-38441
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges...
CVE-2022-4239
The Workreap WordPress theme before 2.6.4 does not verify that an addon service belongs to the user issuing the request, or indeed that it is an addon service, when processing the workreapaddonsserviceremove action, allowing any user to delete any post by knowing or guessing the id...