24677 matches found
CVE-2025-9610
The CVE-2025-9610 entry relates to code-projects Online Event Judging System 1.0 with a SQL injection in /create_account.php. The fname parameter manipulation leads to SQL injection, enabling remote exploitation. Multiple connected sources confirm the vulnerability and public exploitation discuss...
CVE-2025-58323
creationtimestamp| type| source ---|---|--- 2025-08-29 02:21:44+00:00| seen| Telegram/9S4R1cEncaT7DTb7qJdBfMELWam38iSHfsE-I850vIaP1Xc...
PT-2025-35209
Name of the Vulnerable Software and Affected Versions: OpenAtlas version 8.9.0 Description: A Cross-Site Scripting XSS issue exists in OpenAtlas due to insufficient validation of user input received through POST requests. This could allow a remote user to send crafted queries to an authenticated...
CVE-2025-9586
creationtimestamp| type| source ---|---|--- 2025-08-28 21:11:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108447341555170...
CVE-2025-57217
creationtimestamp| type| source ---|---|--- 2025-08-28 17:31:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107579489501260...
CVE-2025-31977
creationtimestamp| type| source ---|---|--- 2025-08-28 17:18:19+00:00| seen| Telegram/-BB4jtweCzquKc6ot1EGZTwTmdVAm9a5NfB1rxjNqyll2Bs...
CVE-2025-54725
creationtimestamp| type| source ---|---|--- 2025-08-28 13:18:55+00:00| seen| Telegram/nYYJQkYW-GbkIGKuIy1oCrSYxmpL81Q1RTPS4s5TH7sbxTc...
PT-2025-35111
Name of the Vulnerable Software and Affected Versions: NeuVector versions prior to 5.4.6 Description: NeuVector process handling can lead to the leakage of sensitive arguments, such as passwords, within security event logs. The software uses regular expressions to detect and redact sensitive data...
CVE-2018-25115
Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...
CVE-2018-25115
Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...
CVE-2018-25115
Multiple D-Link DIR-series routers (DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, DIR-815) are affected by a remote code execution vulnerability in the /service.cgi endpoint. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system...
CVE-2018-25115 D-Link DIR-110/412/600/615/645/815 RCE via service.cgi
Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...
CVE-2025-58204
creationtimestamp| type| source ---|---|--- 2025-08-27 18:16:37+00:00| seen| Telegram/dZoi5DBwQA8dCNI2w0aUw39mYFTpDKt4AjZVpzyoFlD1ag...
CVE-2025-34161
creationtimestamp| type| source ---|---|--- 2025-08-27 17:04:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115101811324852634 2025-08-28 14:12:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/49385 2025-08-30 21:02:29+00:00| seen|...
CVE-2024-29052
creationtimestamp| type| source ---|---|--- 2025-08-27 16:20:05+00:00| seen| Telegram/DYBf2pV6NtNK27JQrku1JP-3HvJ7j5eBtDgjFrWaJkLoVeo...
CVE-2024-29169
creationtimestamp| type| source ---|---|--- 2025-08-27 16:20:02+00:00| seen| Telegram/caSHx1oaIyGClHaecBYpxZkoYnF3jfNjLLF2frnFGrtAgME...
CVE-2025-54598
The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete all notifications via the /notifications/delete/ URI...
CVE-2025-54598
The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete all notifications via the /notifications/delete/ URI...