27626 matches found
CVE-2025-41014
User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in...
CVE-2025-13372
An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed to QuerySet.annotate or QuerySet.alias on PostgreSQL. Earlier...
CVE-2025-41014 User Enumeration vulnerability in TCMAN GIM
User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in...
CLSA-2025-1764678192 libsoup: Fix of 2 CVEs
CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic...
CVE-2025-13735
Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR LapwingLinux on Linux nrfw modules. This vulnerability is associated with program files Code/nrfw/DLP/src/NrCgi.C. This issue affects LapwingLinux: before 2025/11/26...
CVE-2025-13658
creationtimestamp| type| source ---|---|--- 2025-12-02 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-336-01 2025-12-03 00:03:08+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m725ryqnwb2b 2025-12-03 00:03:08+00:00| seen|...
CVE-2025-13685
creationtimestamp| type| source ---|---|--- 2025-12-02 08:14:07+00:00| seen| https://gist.github.com/Darkcrai86/37c29ab9045201caf2cdb8f06c439323 2025-12-02 10:39:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6yqumcbnb2u...
CVE-2025-58483
creationtimestamp| type| source ---|---|--- 2025-12-02 02:44:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xwcz2ur42q...
CVE-2025-13808
creationtimestamp| type| source ---|---|--- 2025-12-02 02:20:14+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3m6xuy7glpb27...
CVE-2025-48572
creationtimestamp| type| source ---|---|--- 2025-12-01 22:25:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115646657177918322 2025-12-02 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1693 2025-12-02 09:32:43+00:00| seen|...
CVE-2025-66300
creationtimestamp| type| source ---|---|--- 2025-12-01 20:45:31+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-p4ww-mcp9-j6f2 2025-12-01 22:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xiilr7l42b 2025-12-02 18:10:08+00:00| seen...
CVE-2025-66303
creationtimestamp| type| source ---|---|--- 2025-12-01 20:42:17+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-x62q-p736-3997 2025-12-01 22:46:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xiz7ugc72j...
CVE-2025-13835
creationtimestamp| type| source ---|---|--- 2025-12-01 19:14:31+00:00| seen| https://gist.github.com/Darkcrai86/31da6f27509e3815434dae781a90d0e9...
CVE-2025-65405
creationtimestamp| type| source ---|---|--- 2025-12-01 17:13:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115645428301148412 2025-12-01 18:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6x2oeulp42q...
CVE-2025-11699
creationtimestamp| type| source ---|---|--- 2025-12-01 15:43:25+00:00| seen| https://gist.github.com/Darkcrai86/98d1b607a99ab2ded56599ac67a379d0 2025-12-02 04:34:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m6y4ikhffj2s...
CVE-2025-55222
creationtimestamp| type| source ---|---|--- 2025-12-01 15:30:56+00:00| seen| https://infosec.place/objects/b07c452b-428c-48af-a490-215c0e255962...
CVE-2024-49572
creationtimestamp| type| source ---|---|--- 2025-12-01 15:30:22+00:00| seen| https://infosec.place/objects/c22ffb7b-d370-4185-b12a-8e92088603d6...
CVE-2025-13296 CSRF in Tekrom Technology's T-Soft E-Commerce
Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025...