CVE-2025-25199

creationtimestamp| type| source ---|---|--- 2025-02-12 17:52:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992187510032617 2025-02-12 18:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrrbreq52s 2025-02-12 20:14:01+00:00| seen|...

CVE-2025-25198

creationtimestamp| type| source ---|---|--- 2025-02-12 17:52:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992187494675681 2025-02-12 18:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrr7c7jn2s 2025-02-12 20:14:00+00:00| seen|...

CVE-2025-25198 mailcow: dockerized vulnerable to password reset poisoning

mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the Host HTTP header to generate a password reset link pointing to an attacker-controlled domain. This...

CVE-2025-1213

creationtimestamp| type| source ---|---|--- 2025-02-12 17:33:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113992114736691216 2025-02-12 18:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrqzweuo2s 2025-02-12 20:14:01+00:00| seen|...

CVE-2025-0818

creationtimestamp| type| source ---|---|--- 2025-02-12 17:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyofqunhf2x 2025-02-12 17:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyoft4tyv2x 2025-02-12 18:19:50+00:00| seen|...

CVE-2025-25184

CVE-2025-25184 affects Rack (Ruby) where CRLF injection in usernames can be logged by Rack::CommonLogger when credentials are supplied via Rack::Auth::Basic. The issue enables log entry manipulation by including CRLF and whitespace in the username, potentially breaking log formats or injecting fr...

CVE-2025-25351

creationtimestamp| type| source ---|---|--- 2025-02-12 16:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyl4fhqyr2d 2025-02-12 18:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry4skb227 2025-02-12 18:33:22+00:00| seen|...

CVE-2025-26363

creationtimestamp| type| source ---|---|--- 2025-02-12 15:20:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113991591892435093 2025-02-12 15:37:04+00:00| seen| Telegram/-xvFghkm9wAI3OH5CI2F-m8akBasfMJYjd3uJLYtuPd0nF4...

CVE-2025-26362

creationtimestamp| type| source ---|---|--- 2025-02-12 15:20:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113991591877323833 2025-02-12 15:37:04+00:00| seen| Telegram/-xvFghkm9wAI3OH5CI2F-m8akBasfMJYjd3uJLYtuPd0nF4 2025-02-12 15:37:05+00:00| published-proof-of-concept|...

CVE-2025-26353

creationtimestamp| type| source ---|---|--- 2025-02-12 14:50:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113991473713011073...

CVE-2025-26347

creationtimestamp| type| source ---|---|--- 2025-02-12 14:20:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113991355655201744 2025-02-12 14:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991464673823116 2025-02-12 15:09:32+00:00| seen|...

CVE-2024-23563

creationtimestamp| type| source ---|---|--- 2025-02-12 14:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyeeqhynb2z 2025-02-14 10:05:07+00:00| seen| Telegram/TFFqSfT26ZOJtpMQorftKfykRnf9I0bnr-COpikamZRlN54i...

CVE-2025-21695

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...

CVE-2025-26343

creationtimestamp| type| source ---|---|--- 2025-02-12 14:05:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113991296613333448 2025-02-12 14:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991464545930818 2025-02-12 15:09:33+00:00| seen|...

CVE-2025-21698

...

CVE-2025-1101

creationtimestamp| type| source ---|---|--- 2025-02-12 13:27:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113991146930911374...

CVE-2025-1197 code-projects Real Estate Property Management System load_user-profile.php sql injection

A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /parse/loaduser-profile.php. The manipulation of the argument userhash leads to sql injection. The attack c...

CVE-2024-10960 Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads

The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'storeUploads' function in all versions up to, and including, 2.6.4. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

CVE-2025-1190

creationtimestamp| type| source ---|---|--- 2025-02-12 10:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwxwsii72a 2025-02-12 11:07:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4058 2025-02-12 12:41:37+00:00| seen| https://t.me/cvedetector/17836...

CVE-2024-12296

creationtimestamp| type| source ---|---|--- 2025-02-12 09:28:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113990205022762415 2025-02-12 10:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwwpliar2z 2025-02-12 10:48:24+00:00| seen|...