Lucene search
+L

7704 matches found

osv_cve
osv_cve
•added 2025/10/31 5:15 p.m.•19 views

CVE-2025-63463

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub4232EC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS7.8AI score0.00413EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/10/31 12:00 a.m.•22 views

TOTOLINK A7000R security vulnerabilities

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from a stack buffer overflow vulnerability, which stems from the failure of the wifiOff parameter in the sub421A0...

7.5CVSS8AI score0.00413EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/10/31 12:00 a.m.•9 views

CVE-2025-63463

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub4232EC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.8AI score0.00413EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/10/31 12:00 a.m.•40 views

CVE-2025-63463

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub4232EC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

0.00413EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/31 12:00 a.m.•26 views

PT-2025-44659

Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description The software contains a stack overflow issue via the wifiOff parameter in the sub 4232EC function. This allows attackers to cause a Denial of Service DoS through a crafted request...

9CVSS7.8AI score0.00413EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/10/30 10:09 p.m.•19 views

CVE-2025-61959

Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...

6.9CVSS5.9AI score0.00273EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/30 12:31 a.m.•22 views

EUVD-2025-36740

Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...

6.9CVSS5.9AI score0.00273EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/29 10:15 p.m.•23 views

CVE-2025-61959

Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...

6.9CVSS0.00273EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/10/29 10:15 p.m.•21 views

CVE-2025-61959

Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...

6.9CVSS5.9AI score0.00273EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/29 9:54 p.m.•11 views

CVE-2025-61959 Vertikal Systems Hospital Manager Backend Services Generation of Error Message Containing Sensitive Information

Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...

6.9CVSS5.9AI score0.00273EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/29 9:54 p.m.•31 views

CVE-2025-61959 Vertikal Systems Hospital Manager Backend Services Generation of Error Message Containing Sensitive Information

Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...

6.9CVSS0.00273EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2025/10/29 11:51 a.m.•16 views

Russian Hackers Target Ukrainian Organizations Using Stealthy Living-Off-the-Land Tactics

Organizations in Ukraine have been targeted by threat actors of Russian origin with an aim to siphon sensitive data and maintain persistent access to compromised networks. The activity, according to a new report from the Symantec and Carbon Black Threat Hunter Team, targeted a large business...

8.8CVSS7.6AI score0.94008EPSS
SaveExploits39
The Hacker News
The Hacker News
•added 2025/10/29 11:51 a.m.•29 views

Russian Hackers Target Ukrainian Organizations Using Stealthy Living-Off-the-Land Tactics

Organizations in Ukraine have been targeted by threat actors of Russian origin with an aim to siphon sensitive data and maintain persistent access to compromised networks. The activity, according to a new report from the Symantec and Carbon Black Threat Hunter Team, targeted a large business...

8.8CVSS7.6AI score0.94008EPSS
SaveExploits39
Positive Technologies
Positive Technologies
•added 2025/10/29 12:00 a.m.•23 views

PT-2025-44350

Name of the Vulnerable Software and Affected Versions Hospital Manager Backend Services versions prior to September 19, 2025 Description The Hospital Manager Backend Services returned detailed ASP.NET error pages for invalid requests to the ''WebResource.axd'' endpoint. These error pages revealed...

6.9CVSS5.8AI score0.00273EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2025/10/28 1:34 a.m.•22 views

CVE-2025-62891

Cross-Site Request Forgery CSRF vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows Cross Site Request Forgery.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.5...

4.3CVSS6.9AI score0.0014EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/28 12:00 a.m.•20 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to convert nrpages to an unsigned long type, which could lead to an overflow in the PERFIDX2OFF...

7.3AI score0.00154EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/27 3:30 a.m.•23 views

EUVD-2025-36047

Cross-Site Request Forgery CSRF vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows Cross Site Request Forgery.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.5...

6.3AI score0.0014EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/27 2:15 a.m.•21 views

CVE-2025-62891

Cross-Site Request Forgery CSRF vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows Cross Site Request Forgery.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.5...

4.3CVSS0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/27 1:33 a.m.•13 views

CVE-2025-62891 WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows Cross Site Request Forgery.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.5...

4.3CVSS5.8AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/27 1:33 a.m.•39 views

CVE-2025-62891 WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows Cross Site Request Forgery.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.5...

4.3CVSS0.0014EPSS
SaveExploits0References1
Rows per page
Query Builder