CVE-2025-20205

creationtimestamp| type| source ---|---|--- 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 16:51:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113952312513443564 2025-02-05 17:16:31+00:00| seen|...

CVE-2025-20170

creationtimestamp| type| source ---|---|--- 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 17:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh35ofn6c2t 2025-02-05 19:09:15+00:00| seen|...

CVE-2025-20174

creationtimestamp| type| source ---|---|--- 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 17:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh35yszmu2j 2025-02-05 19:09:08+00:00| seen|...

CVE-2025-20171

creationtimestamp| type| source ---|---|--- 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 17:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh35rebpc2n 2025-02-05 19:09:16+00:00| seen|...

CVE-2024-20184

creationtimestamp| type| source ---|---|--- 2025-02-05 16:37:04+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135...

CVE-2025-20185

creationtimestamp| type| source ---|---|--- 2025-02-05 16:36:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113952253499265593 2025-02-05 17:16:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh36kj54x2h 2025-02-05 19:09:07+00:00| seen|...

CVE-2020-15628

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxmailautoreply.php. When parsing the user parameter, the...

CVE-2024-2878

creationtimestamp| type| source ---|---|--- 2025-02-05 12:22:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113951254331919251 2025-02-05 13:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhgnprciwr2j 2025-02-05 14:58:14+00:00| seen|...

CVE-2024-47100

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly 6ES7211-1BE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/DC 6ES7211-1AE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/Rly 6ES7211-1HE40-0XB0, SIMATIC S7-1200 CPU 1212C AC/DC/Rly 6ES7212-1BE40-0XB0, SIMATIC S7-1200 CPU 1212C DC/DC/DC...

CVE-2024-29726

SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to retrieve, update and delete all information in the database by sending a specially crafted SQL query: https://XXXXXXX.saludydesafio.com/app/ax/setAsRead/, parameter id...

CVE-2024-29966

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance...

CVE-2025-0725

creationtimestamp| type| source ---|---|--- 2025-02-05 07:24:03+00:00| seen| https://daniel.haxx.se/blog/2025/02/05/curl-8-12-0/ 2025-02-05 08:44:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhg6ld6ww626 2025-02-05 09:58:56+00:00| seen|...

CVE-2024-32706

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through = 6.4...

CVE-2024-49623

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hasan movahed Duplicate Title Validate duplicate-title-validate allows Blind SQL Injection.This issue affects Duplicate Title Validate: from n/a through = 1.0...

CVE-2024-13829

creationtimestamp| type| source ---|---|--- 2025-02-05 05:29:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113949630339559126 2025-02-05 06:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfwbklrar2h 2025-02-05 08:29:09+00:00| seen|...

CVE-2024-1643

By knowing an organization's ID, an attacker can join the organization without permission and gain the ability to read and modify all data within that organization. This vulnerability allows unauthorized access and modification of sensitive information, posing a significant security risk. The fla...

CVE-2024-10626

The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteuploadedfile function in all versions up to, and including, 17.7. This makes it possible for authenticated attackers, with Subscriber-level...

CVE-2024-10914

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument name leads to os command...

CVE-2025-1026

creationtimestamp| type| source ---|---|--- 2025-02-05 05:08:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113949546327052981 2025-02-05 05:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvrhm2v2h 2025-02-05 06:48:35+00:00| seen|...

CVE-2025-1025

creationtimestamp| type| source ---|---|--- 2025-02-05 05:08:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113949546311391296 2025-02-05 05:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvmo2252f 2025-02-05 07:26:56+00:00| seen|...