7014 matches found
CVE-2025-5495 Netgear WNR614 URL improper authentication
A vulnerability was found in Netgear WNR614 1.1.0.281.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is possible to initiate the attack remotely. The...
New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch
Google on Monday released out-of-band fixes to address three security issues in its Chrome browser, including one that it said has come under active exploitation in the wild. The high-severity flaw is being tracked as CVE-2025-5419 CVSS score: 8.8, and has been flagged as an out-of-bounds read an...
CVE-2025-5474
creationtimestamp| type| source ---|---|--- 2025-06-03 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-322/...
CVE-2025-5481
creationtimestamp| type| source ---|---|--- 2025-06-03 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-324/...
Qualcomm Fixes 3 Zero-Days Used in Targeted Android Attacks via Adreno GPU
Qualcomm has shipped security updates to address three zero-day vulnerabilities that it said have been exploited in limited, targeted attacks in the wild. The flaws in question, which were responsibly disclosed to the company by the Google Android Security team, are listed below - CVE-2025-21479...
CVE-2025-1051
creationtimestamp| type| source ---|---|--- 2025-05-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-311/ 2025-06-02 19:36:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnjl6hk5li2 2025-09-01 18:48:20+00:0...
Chinese Hackers Exploit Cityworks 0-Day to Hit US Local Governments
Cisco Talos warns of active exploitation of a zero-day vulnerability CVE-2025-0994 in Cityworks supposedly by Chinese hackers from…...
Chrome 0-Day CVE-2025-4664 Exposes Windows, Linux Browser Activity
A Chrome zero-day bug, CVE-2025-4664, exposes login tokens on Windows and Linux. Google has issued a fix, users should update immediately...
SafeLine WAF: Open Source Web Application Firewall with Zero-Day Detection and Bot Protection
From zero-day exploits to large-scale bot attacks — the demand for a powerful, self-hosted, and user-friendly web application security solution has never been greater. SafeLine is currently the most starred open-source Web Application Firewall WAF on GitHub, with over 16.4K stars and a rapidly...
CVE-2024-32803
Server-Side Request Forgery SSRF vulnerability in 2day.Sk, Webikon SuperFaktura WooCommerce.This issue affects SuperFaktura WooCommerce: from n/a through 1.40.3...
CVE-2024-51873
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Masashi Takizawa Multi-day Booking Calendar multi-day-booking-calendar allows DOM-Based XSS.This issue affects Multi-day Booking Calendar: from n/a through = 1.0.1...
Exploit for CVE-2025-37899
This is the artefact repository associated with my blog post Ho...
CVE-2012-3434
Multiple cross-site scripting XSS vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 datemin, or 3 datemax parameter...
CVE-2005-3064
MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows remote attackers to change or delete the message of the day motd.txt...
CVE-2025-47867
creationtimestamp| type| source ---|---|--- 2025-05-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-297/ 2025-06-18 04:39:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18687...
CVE-2025-31208
creationtimestamp| type| source ---|---|--- 2025-05-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-299/ 2026-04-02 22:16:45+00:00| seen| Telegram/LxwhYgp3VyykJFkTybHSMczvBDUi5kkG99Yg-gAxQSwVjzg...
CVE-2025-47866
creationtimestamp| type| source ---|---|--- 2025-05-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-296/...
CVE-2025-31233
creationtimestamp| type| source ---|---|--- 2025-05-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-298/...