9703 matches found
CVE-2025-23176 Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...
CVE-2025-23175
CVE-2025-23175 relates to a multiple XSS (CWE-79) exposure associated with Tecnick TCExam. Connected sources indicate the vulnerable software is Tecnick TCExam, including version 16.3.2 per CNNVD, with reports in PT-Security citing the Tecnick/Tcexam name. The documents do not provide concrete ex...
WordPress Seriously Simple Podcasting plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Seriously Simple Podcasting versions = 3.9.0...
CVE-2025-46237
creationtimestamp| type| source ---|---|--- 2025-04-22 10:03:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12830 2025-04-22 11:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju5d3mx2l 2025-04-22 14:13:41+00:00| seen|...
CVE-2025-46252
creationtimestamp| type| source ---|---|--- 2025-04-22 10:02:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12816 2025-04-22 11:05:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6umig2v 2025-04-22 14:13:28+00:00| seen|...
CVE-2025-30030
creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01 2025-06-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-388/...
CVE-2025-31353
creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01 2025-06-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-396/...
CVE-2025-1976
creationtimestamp| type| source ---|---|--- 2025-04-22 07:47:32+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3lnf6t77jcc25 2025-04-23 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3pgntgn2t 2025-04-24 04:05:58+00:00| seen|...
CVE-2025-26413
creationtimestamp| type| source ---|---|--- 2025-04-22 07:21:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lnf5fbk2n52h 2025-04-22 08:02:11+00:00| seen| https://bsky.app/profile/potato.software/post/3lnf7nhiw7x27 2025-04-22 08:03:52+00:00| seen|...
CVE-2025-26413
Apache Kvrocks versions through 2.11.1 are vulnerable to an Improper Input Validation flaw within the SETRANGE command. The application fails to verify if the offset input is a positive integer, allowing it to be used as an out-of-range string index. This flaw can lead to a server crash . To reme...
CVE-2025-2291
creationtimestamp| type| source ---|---|--- 2025-04-22 01:38:00+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3lnek5qwsyqo2 2025-04-23 07:35:38+00:00| seen| https://bsky.app/profile/theemerichunter.bsky.social/post/3lnhomvsxmg25 2025-08-09 13:26:56+00:00...
CVE-2025-3855
Summary of CVE-2025-3855 (CodeCanyon RISE Ultimate Project Manager 3.8.2) A vulnerability exists in the component “Profile Picture Handler” for the endpoint /index.php/team_members/save_profile_image/ where the argument profile_image_file is manipulated, leading to improper control of resource id...
CVE-2025-2987
creationtimestamp| type| source ---|---|--- 2025-04-22 00:03:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12772 2025-04-22 03:04:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lneoz3bexw2t 2025-04-22 04:11:22+00:00| seen| https://t.me/cvedetector/23476...
CVE-2025-32955
creationtimestamp| type| source ---|---|--- 2025-04-21 21:02:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12760 2025-04-21 23:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lneblkxtth2l 2025-04-22 00:00:22+00:00| seen|...
CVE-2025-23174
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2025-32793
creationtimestamp| type| source ---|---|--- 2025-04-21 16:02:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12686 2025-04-21 18:59:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lndtv7rzho2y 2025-04-21 19:49:42+00:00| seen|...
CVE-2025-3839
A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...
CVE-2025-43970
creationtimestamp| type| source ---|---|--- 2025-04-21 01:02:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12628 2025-04-21 01:51:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114373444529201097 2025-04-21 02:49:17+00:00| seen|...
CVE-2025-43961
creationtimestamp| type| source ---|---|--- 2025-04-21 00:05:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12627 2025-04-21 02:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnc5oyakao2l 2025-04-21 03:56:19+00:00| seen|...
