851 matches found
CVE-2025-53084
creationtimestamp| type| source ---|---|--- 2025-07-24 15:30:11+00:00| seen| https://infosec.place/objects/438f2ffc-02fd-4f03-8802-113f227e5927...
CVE-2025-43976
The com.enflick.android.tn2ndLine application through 24.17.1.0 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.enflick.android.TextNow.activities.DialerActivity component...
WordPress plugin re.place 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...
Toward a Lightweight, Scalable, and Parallel Secure Encryption Engine
The exponential growth of Internet of Things IoT applications has intensified the demand for efficient, high-throughput, and energy-efficient data processing at the edge. Conventional CPU-centric encryption methods suffer from performance bottlenecks and excessive data movement, especially in...
CVE-2025-3464
creationtimestamp| type| source ---|---|--- 2025-06-16 09:37:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18427 2025-06-16 13:18:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114693235260086964 2025-06-16 13:30:10+00:00| seen|...
CVE-2024-52561
creationtimestamp| type| source ---|---|--- 2025-06-03 10:00:05+00:00| seen| https://infosec.place/objects/a791cbb1-ae89-402d-9b00-b1a0bea46240 2025-06-03 10:06:06+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lqp25ovz6r2p 2025-06-03 10:23:14+00:00| seen|...
CVE-2024-26445
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deleteplace.php...
CVE-2024-20885
Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to make a call without proper permission...
CVE-2024-0434
The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ttbmnewplacesave' function in all versions up to, and including, 1.7.1. This makes it possible for...
CVE-2024-8558
A vulnerability classified as problematic was found in SourceCodester Food Ordering Management System 1.0. This vulnerability affects unknown code of the file /foms/routers/place-order.php of the component Price Handler. The manipulation of the argument total leads to improper validation of...
CVE-2023-26521
Missing Authorization vulnerability in CodePeople Search in Place allows Functionality Misuse.This issue affects Search in Place: from n/a through 1.0.104...
CVE-2023-28153
An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...
CVE-2022-29627
An insecure direct object reference IDOR in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers...
CVE-2022-29628
A cross-site scripting XSS vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter...
CVE-2022-30003
Sourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting XSS, allowing attackers to register as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields...
CVE-2021-39582
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfGetPlaceObject located in swfobject.c. It allows an attacker to cause code Execution...
CVE-2021-20833
The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate...
CVE-2020-22122
A SQL injection vulnerability in /oa.php?c=Staff=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...
CVE-2015-10002
A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressing of the button causes a local denial of service. It is recommended to upgrade the affected component...
CVE-2019-3728
creationtimestamp| type| source ---|---|--- 2025-05-20 16:41:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17010 2025-10-16 15:30:06+00:00| seen| https://infosec.place/objects/804ff5cb-492e-47bc-8fee-dac5d8b55797...