9710 matches found
CVE-2025-29814
Technical details about CVE-2025-29814 are not provided in the connected documents. Public information here only notes an elevation of privileges in Microsoft Partner Center; no affected versions, exploit details, or fixes are included. Monitor for updates.
CVE-2025-2574
Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...
CVE-2025-2556
creationtimestamp| type| source ---|---|--- 2025-03-20 18:20:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8249 2025-03-20 21:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxaxcgc26 2025-03-20 21:35:06+00:00| seen| https://t.me/cvedetector/20...
CVE-2025-2555
Audi Universal Traffic Recorder App 2.0 is affected by CVE-2025-2555 due to a hard-coded password in the FTP Credentials component. The issue enables local attack exploitation; attack complexity is high and exploitation is disclosed publicly. Upgrading to version 2.89 (new customers) or 2.90 (exi...
CVE-2025-29914
OWASP Coraza WAF (Go library, modsecurity-compatible) is affected by a parser confusion that yields a wrong REQUEST_FILENAME when the URI starts with //, enabling a potential rules bypass. The issue stems from how the parser maps // URIs to filesystem paths and is fixed in Coraza 3.3.3. Connected...
CVE-2025-2551
creationtimestamp| type| source ---|---|--- 2025-03-20 17:18:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8235 2025-03-20 19:54:27+00:00| seen| https://t.me/cvedetector/20745 2025-03-20 21:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxb2qg...
CVE-2025-29149
Tenda i12 V1.0.0.103805 was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function...
CVE-2025-23120
A vulnerability allowing remote code execution RCE for domain users...
CVE-2025-0315
creationtimestamp| type| source ---|---|--- 2025-03-20 13:03:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr44wthh2n 2025-03-20 13:05:08+00:00| seen| Telegram/0tokKlWnGavu1g5EFwRDRnlGnj7brX6W2ajJgncmBMXjS3Y 2025-03-20 13:13:15+00:00| seen| https://t.me/cvedetector/20720...
CVE-2025-0453
creationtimestamp| type| source ---|---|--- 2025-03-20 13:03:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr44thbj2w 2025-03-20 13:13:08+00:00| seen| https://t.me/cvedetector/20715 2025-03-20 16:18:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8...
CVE-2025-0191
creationtimestamp| type| source ---|---|--- 2025-03-20 13:03:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr43rj2e2m...
CVE-2025-0628
creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836524629766 2025-03-20 13:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr45ozcp24 2025-03-20 13:13:01+00:00| seen|...
CVE-2024-9880
creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:45+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836353277686 2025-03-26 17:25:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8900...
CVE-2024-9919
creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836385681439...
CVE-2024-12433
creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:30+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhgh6qx2m...
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: CVE-2024-47538: Fixed a stack-buffer overflow in vorbishandleidentificationpacket bsc1234415. CVE-2024-47835: Fixed NULL-pointer dereference in LRC subtitle parser bsc1234450. CVE-2024-47600: Fixed Out-of-bounds read in...
CVE-2025-0454
A Server-Side Request Forgery SSRF vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0. The vulnerability arises due to a hostname confusion between the urlparse function from the urllib.parse library and the requests library. A malicious...
CVE-2024-6827
Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data...
CVE-2024-10457
CVE-2024-10457 describes multiple SSRF vulnerabilities in the significant-gravitas/autogpt project (agpt-platform-beta-v0.1.1). The issues arise when inputs to a set of GitHub integration and web-search blocks are controlled by untrusted sources, enabling requests to internal or attacker-controll...