7542 matches found
CVE-2025-27867
creationtimestamp| type| source ---|---|--- 2025-03-12 17:10:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lk735oc7vx26 2025-03-12 17:59:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114150759111212347 2025-03-12 18:00:03+00:00| seen|...
The vulnerability of the MFlash secure data exchange platform lies in the lack of mechanisms for neutralizing elements related to CSV files, allowing attackers to execute arbitrary commands.
The vulnerability of the MFlash secure messaging platform is related to the lack of mechanisms for neutralizing elements related to CSV files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the MFlash secure data exchange platform lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the MFlash secure messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the administration panel by injecting specially crafted HTML code...
The vulnerability of the MFlash secure data exchange platform lies in its insufficient authentication attempt limitation, which allows a perpetrator to gain unauthorized access to the platform.
The vulnerability of the MFlash secure messaging platform is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the platform...
CVE-2025-27773
creationtimestamp| type| source ---|---|--- 2025-03-11 19:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114145527842239250 2025-03-11 20:21:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7223 2025-03-11 20:46:20+00:00| seen|...
DEBIAN-CVE-2025-24201
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4...
CVE-2025-24201
CVE-2025-24201 is a WebKit/WebKitGTK issue described in connected advisories as an out-of-bounds write that allowed breaking out of the Web Content sandbox. Root cause: out-of-bounds write in WebKit. Impact: potential sandbox breakout affecting Apple WebKit-based products (Safari, iOS/iPadOS 18.x...
CVE-2025-24035
creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:40:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114145022545782390 2025-03-11 17:48:34+00:00| seen|...
CVE-2025-24045
creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:40:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114145022545782390 2025-03-11 17:48:34+00:00| seen|...
CVE-2025-26645
creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:23:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144954235534498 2025-03-11 17:40:22+00:00| seen|...
The vulnerability of the LaunchServices service in operating systems such as macOS, iOS, iPadOS, tvOS, and watchOS allows attackers to circumvent security restrictions and gain increased privileges.
The vulnerability of the LaunchServices service in operating systems such as macOS, iOS, iPadOS, tvOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...
Security Advisory 0112
Security Advisory 0112 . CSAF PDF Date: March 11, 2025 Revision | Date | Changes ---|---|--- 1.0 | March 11, 2025 | Initial release The CVE-ID tracking this issue: CVE-2024-9448 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Common Weakness Enumeration: CWE-284 Improper...
SAP Commerce 跨站脚本漏洞
SAP Commerce is a set of cloud-based e-commerce platforms from Germany's SAP. It supports sales management, marketing management, order management, and operations management. A cross-site scripting vulnerability exists in SAP Commerce that stems from insufficient input validation and could lead t...
CVE-2025-27610
creationtimestamp| type| source ---|---|--- 2025-03-10 22:40:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7074 2025-03-11 00:54:04+00:00| seen| https://t.me/cvedetector/20000 2025-03-11 04:41:13+00:00| seen| Telegram/HMAWwcay4hklj3BM91LAZxDwOui412reXuT0Q0CnkrnI9Zt...
CVE-2025-2135
creationtimestamp| type| source ---|---|--- 2025-03-10 21:51:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114140348492064450 2025-03-10 23:13:36+00:00| seen| https://t.me/cvedetector/19984 2025-03-10 23:51:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2qmpalcz...
CVE-2022-43454
A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges...
CVE-2024-44227
The issue was addressed with improved memory handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory...
CVE-2024-44192
The issue was addressed with improved checks. This issue is fixed in watchOS 11, macOS Sequoia 15, Safari 18, visionOS 2, iOS 18 and iPadOS 18, tvOS 18. Processing maliciously crafted web content may lead to an unexpected process crash...
CVE-2025-24813
creationtimestamp| type| source ---|---|--- 2025-03-10 17:14:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lk22hs7zke24 2025-03-10 17:38:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7027 2025-03-10 17:45:38+00:00| seen|...
