38083 matches found
CVE-2025-66202 Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765
Astro is a web framework. Versions 5.15.7 and below have a double URL encoding bypass which allows any unauthenticated attacker to bypass path-based authentication checks in Astro middleware, granting unauthorized access to protected routes. While the original CVE-2025-64765 was fixed in v5.15.8,...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 - React2Shell PoC A proof of concept exploit f...
Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet Attacks
A critical security flaw in the Sneeit Framework plugin for WordPress is being actively exploited in the wild, per data from Wordfence. The remote code execution vulnerability in question is CVE-2025-6389 CVSS score: 9.8, which affects all versions of the plugin prior to and including 8.3. It has...
Exploit for Deserialization of Untrusted Data in Facebook React
React4Shell ULTIMATE REACT4SHELL EXPLOITATION FRAMEWORK...
Exploit for Deserialization of Untrusted Data in Facebook React
React4Shell ULTIMATE REACT4SHELL EXPLOITATION FRAMEWORK...
CVE-2025-66321
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66322
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66322
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66321
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66320
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66320
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66322
Huawei HarmonyOS camera framework module suffers a multi-threaded conditional contention vulnerability that can be exploited to compromise availability. The CNVD entry attributes a race-condition-like flaw in the camera subsystem; no concrete patch details are provided in the connected documents....
EUVD-2025-201687
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66322
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66322
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66321
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66321
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66321
Summary of findings : The CVE-2025-66321 entry describes a multi-thread race condition vulnerability in Huawei’s HarmonyOS camera framework module . The underlying root cause is a race condition occurring in a multithreaded context, leading to a potential impact on availability . The connected CN...