EUVD-2025-37519

EUVD-2025-37519...

EUVD-2025-37518

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...

EUVD-2025-37523

EUVD-2025-37523...

CGA-MQRV-7GPQ-XQ6J

Bulletin has no description...

MINI-MMG6-G289-R5HQ

Bulletin has no description...

CGA-4R3J-3H5P-5GHX

Bulletin has no description...

📄 HTMLDOC 1.9.13 Stack Buffer Overflow

HTMLDOC versions 1.9.13 and below proof of concept exploit that demonstrates a stack buffer overflow vulnerability. !/usr/bin/env python3 Exploit Title: HTMLDOC 1.9.13 - Stack Buffer Overflow Google Dork: N/A Date: 2025-08-26 Exploit Author: wulfgarpro Vendor Homepage:...

CVE-2024-51317

An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the domnodenormalize function...

MINI-552W-RR33-HR82

Bulletin has no description...

MINI-PHQG-4XPH-WQ8M

Bulletin has no description...

MINI-5Q8X-RRG6-HGPQ

Bulletin has no description...

MINI-989F-4X6V-8PGP

Bulletin has no description...

MINI-5W82-4M5Q-P2XQ

Bulletin has no description...

Exploit for CVE-2025-11174

CVE-2025-11174: Unauthenticated Information Disclosure in Word...

CVE-2025-11174

The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 1.1.6. This is due to the plugin exposing an unauthenticated AJAX action dllloadposts which returns a JSON table of document data without performing nonce or capability...

MINI-9JQM-Q98Q-6RXW

Bulletin has no description...

CVE-2025-57106

A flaw was found in Kitware VTK Visualization Toolkit. This vulnerability allows a buffer overflow via processing GLTF Graphics Language Transmission Format accessor data in the vtkGLTFDocumentLoader's BufferDataExtractionWorker template function...

MINI-CVQF-6WCC-V437

Bulletin has no description...

CVE-2025-8383

The Depicter plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 4.0.4. This is due to missing or incorrect nonce validation on the depicter-document-rules-store function. This makes it possible for unauthenticated attackers to modify document rule...

CVE-2025-11843

Therefore Corporation GmbH has recently become aware that Therefore™ Online and Therefore™ On-Premises contain an account impersonation vulnerability. A malicious user may potentially be able to impersonate the web service account or the account of a service using the API when connecting to the...