19028 matches found
CVE-2025-46099
creationtimestamp| type| source ---|---|--- 2025-07-18 19:08:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/44498 2025-07-19 03:00:06+00:00| published-proof-of-concept| Telegram/nzYKhchPqnjkmQtRnvSWn0Xnfothyx5mgumD7MVA9piB0...
CVE-2025-7793
A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary. The manipulation of the argument webSiteId leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit...
CVE-2025-50716
creationtimestamp| type| source ---|---|--- 2025-07-17 05:19:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/44314 2025-07-17 09:00:05+00:00| published-proof-of-concept| Telegram/7jZsAyPbO79zokTMCWqKa300rRL4Jcpz3nrbkvQl9AGhI 2025-11-22 15:36:07+00:00| published-proof-of-concept|...
GHSA-564R-HJ7V-MCR5
creationtimestamp| type| source ---|---|--- 2025-07-16 03:12:09+00:00| seen| https://gist.github.com/safer-bot/36f2ef37d36eb5a3075f945a07663c8f 2025-07-16 06:27:33+00:00| seen| https://gist.github.com/safer-bot/dcba38acd7b3b589f657659fa2a6b641 2025-07-16 14:38:12+00:00| seen|...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via the DDL component. An attacker can cause the server to hang or crash repeatedly by sending crafted requests over the network with high privileges. Details Denial of Service DoS describes a family of attacks, al...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via the DML component. An attacker can cause the server to hang or crash repeatedly by sending crafted requests over the network. Details Denial of Service DoS describes a family of attacks, all aimed at making a...
Use After Free
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via improper handling of possible socket destruction in P2PSocketTcpBase. An attacker can...
SUSE: Security Advisory (SUSE-SU-2025:02275-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-53818
creationtimestamp| type| source ---|---|--- 2025-07-12 10:41:59+00:00| published-proof-of-concept| https://github.com/Sunwood-ai-labs/github-kanban-mcp-server/security/advisories/GHSA-6jx8-rcjx-vmwf...
CVE-2025-52097
creationtimestamp| type| source ---|---|--- 2025-07-11 19:36:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/43703 2025-07-12 03:00:05+00:00| published-proof-of-concept| Telegram/bPSYRFN9kvBfi9BwHVNXk5QOH4G3yeiah-SPugKHJ78tFsA...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the gnutlsfigurecommonciphersuite function. Remediation A fix was pushed into the master branch but not yet published. References - Fix Commit - PoC - Red Hat Bugzilla Bug - Release Notes Credit: Stefan Bühl...
Git 安全漏洞
Git is a free, open source distributed version control system open-sourced by Git. A security vulnerability exists in Git that stems from insufficient validation of published bundles, allowing remote ends to perform protocol injection...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the stack-overflow handler in ljstate.c. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Commit - GitHub Gist - GitHub Issue Credit: Kutyavin Maxim...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the snapunsink function in ljsnap.c.c, which the IRFSTORE process uses when handling a NULL metatable. An attacker can cause the application to crash or become unresponsive by triggering this condition...
WordPress Invico - WordPress Consulting Business Theme Theme <= 1.9 is vulnerable to Cross Site Scripting (XSS)
Software Invico - WordPress Consulting Business Theme Type Theme Vulnerable versions = 1.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31427 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9e4642f9ea67 Credits Tran...
WordPress Uncode Core plugin <= 2.9.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcodes vulnerability discovered by stealthcopter in WordPress Plugin Uncode Core versions = 2.9.4.2...
WordPress Radio Station plugin <= 2.5.12 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Radio Station versions = 2.5.12...
CVE-2025-45081
creationtimestamp| type| source ---|---|--- 2025-07-01 19:09:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20071...