9516 matches found
CVE-2025-36557
creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15452 2025-05-08 00:27:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomnonizgw2o 2025-05-08 00:52:38+00:00| seen| https://t.me/cvedetector/24766...
CVE-2025-36546
creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15451 2025-05-08 00:27:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomnonwo4a2p 2025-05-08 00:52:50+00:00| seen| https://t.me/cvedetector/24774 2025-05-09...
CVE-2025-43878
creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15450 2025-05-08 00:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomnoo5b5322 2025-05-08 00:52:45+00:00| seen| https://t.me/cvedetector/24771...
CVE-2025-36504
creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15446 2025-05-07 23:30:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomkd3xzqbc2 2025-05-08 00:27:21+00:00| seen|...
CVE-2025-46826 insa-auth Open-Redirect on provided CAS server login endpoint
insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing basic student information name and number. However, the issue posed minimal risk, was never exploited, and had limited...
CVE-2025-46828
creationtimestamp| type| source ---|---|--- 2025-05-07 21:31:33+00:00| seen| https://t.me/cvedetector/24735 2025-05-07 22:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomgxuwups2p...
CVE-2025-4043 Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code
An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot...
CVE-2025-20162
creationtimestamp| type| source ---|---|--- 2025-05-07 18:41:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lom2f6b4ir2l...
CVE-2025-20154
creationtimestamp| type| source ---|---|--- 2025-05-07 18:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lom2f65rko2h...
CVE-2025-20197
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...
CVE-2025-20140
A vulnerability in the Wireless Network Control daemon wncd of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent wireless attacker to cause a denial of service DoS condition. This vulnerability is due to improper memory management. An attacker could...
CVE-2025-20181
A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the...
CVE-2025-12353
creationtimestamp| type| source ---|---|--- 2025-05-07 15:48:27+00:00| seen| https://t.me/NinjaSec/299 2025-11-08 05:46:00+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m53vbopjwcr2 2025-11-08 06:24:26+00:00| seen|...
CVE-2025-47684
Cross-Site Request Forgery CSRF vulnerability in Smaily Smaily for WP smaily-for-wp allows Cross Site Request Forgery.This issue affects Smaily for WP: from n/a through = 3.1.7...
WordPress aBlocks plugin <= 1.9.2 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Prissy Patchstack Alliance in WordPress Plugin aBlocks versions = 1.9.2...
CVE-2025-47625 WordPress DoFollow Case by Case <= 3.5.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados DoFollow Case by Case allows Stored XSS. This issue affects DoFollow Case by Case: from n/a through 3.5.1...
CVE-2025-47612
CVE-2025-47612 (ClickWhale) is a Missing Authorization vulnerability in the flowdee ClickWhale WordPress plugin (affected: 2.4.6 and earlier). The issue arises from incorrectly configured access control, enabling unauthorized access due to insufficient authorization checks. NVD/vectors indicate a...
CVE-2025-29602
flatpress 1.3.1 is vulnerable to Cross Site Scripting XSS in Administration area via Manage categories...
CVE-2020-36791
The CVE-2020-36791 entry refers to a Linux kernel net_sched issue where cp->alloc_hash could be left at an incorrect size after a hash allocation, enabling a potential out-of-bounds access. The described root cause is that the hash calculation was moved before tcindex_alloc_perfect_hash() but ...