58 matches found
PT-2026-34970
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero error exists in the tdfxfb driver within the fbdev subsystem. The issue occurs during the FBIOPUT VSCREENINFO operation because the driver uses the pixclock variable...
PT-2026-34333
An insecure direct object reference IDOR vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registered users through various vulnerable authenticated resources in the application. The vulnerable endpoints result from:...
EUVD-2025-17045
Malicious code in bioql PyPI...
CVE-2021-27692
creationtimestamp| type| source ---|---|--- 2025-06-10 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrbs3qzz3u2u...
CVE-2025-5714
CVE-2025-5714 affects SoluçõesCoop iSoluçõesWEB up to 20250516, specifically the Profile Information Update component. The vulnerability lies in the /sys/up.upload.php file where manipulating the nomeArquivo argument enables a path traversal, potentially exploitable remotely. Several sources (NVD...
CVE-2025-5714 SoluçõesCoop iSoluçõesWEB Profile Information Update up.upload.php path traversal
A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250516. It has been classified as problematic. This affects an unknown part of the file /sys/up.upload.php of the component Profile Information Update. The manipulation of the argument nomeArquivo leads to path traversal. It is possib...
iSoluçõesWEB SoluçõesCoop 路径遍历漏洞
iSoluçõesWEB SoluçõesCoop is a management system for iSoluçõesWEB in Brazil. A path traversal vulnerability exists in iSoluçõesWEB SoluçõesCoop 20250516 and earlier versions, which stems from an incorrect manipulation of the nomeArquivo parameter of the file /sys/up.upload.php in the component...
CVE-2024-24093
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
PT-2025-20040 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR May-2025 Release 1 Description: The issue concerns the improper export of Android application components in NotificationHistoryImageProvider, allowing local attackers to access notification images. This could...
CGA-V6F8-V6C4-P8QH
Bulletin has no description...
CVE-2025-21092
GMOD Apollo does not have sufficient logical or access checks when updating a user's information. This could result in an attacker being able to escalate privileges for themselves or others...
openSUSE Security Advisory (SUSE-SU-2024:0726-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-26365
creationtimestamp| type| source ---|---|--- 2025-02-12 15:35:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113991650909763601 2025-02-12 15:37:04+00:00| seen| Telegram/-xvFghkm9wAI3OH5CI2F-m8akBasfMJYjd3uJLYtuPd0nF4 2025-02-12 16:02:48+00:00| seen| https://t.me/cvedetector/17873...
GHSA-H6CC-RC6Q-23J4
creationtimestamp| type| source ---|---|--- 2025-01-27 17:48:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113901574697474273...
GHSA-XRJQ-57MQ-4HF8
creationtimestamp| type| source ---|---|--- 2025-01-08 18:31:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113794159917395964...
CVE-2024-12132
creationtimestamp| type| source ---|---|--- 2025-01-03 08:23:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113763456158197001 2025-01-03 09:15:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3letavqjsnn2k 2025-01-03 09:56:59+00:00| seen|...
CGA-P6WC-P263-FCGG
Bulletin has no description...
Opensc: memory use after free in authentic driver when updating token info
...
PT-2025-28384 · Google · Isemtelephony
Name of the Vulnerable Software and Affected Versions: isemtelephony versions prior to Android 15 Description: The issue is related to improper access control in isemtelephony, allowing local attackers to access sensitive information. Recommendations: For versions prior to Android 15, update to...