Lucene search
+L

82837 matches found

RedhatCVE
RedhatCVE
added 2025/10/16 10:53 a.m.7 views

CVE-2025-39984

In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi-skb after XDP process The syzbot report a UAF issue: BUG: KASAN: slab-use-after-free in skbresetmacheader include/linux/skbuff.h:3150 inline BUG: KASAN: slab-use-after-free in napifragsskb net/core/gro.c:723...

7.3CVSS5.5AI score0.00184EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
added 2025/10/16 12:0 a.m.9 views

Improving Cybercrime Detection and Digital Forensics Investigations with Artificial Intelligence

According to a recent EUROPOL report, cybercrime is still recurrent in Europe, and different activities and countermeasures must be taken to limit, prevent, detect, analyze, and fight it. Cybercrime must be prevented with specific measures, tools, and techniques, for example through automated...

6.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2025/10/15 5:27 p.m.11 views

alloy-dyn-abi has DoS vulnerability on `alloy_dyn_abi::TypedData` hashing

Impact An uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services may be particularly impacted. If in use, external auto-restarting mechanisms can...

7.5CVSS6.8AI score0.00416EPSS
SaveExploits0References7Affected Software1
HackRead
HackRead
added 2025/10/15 4:55 p.m.7 views

BreachLock Named Representative Provider for Penetration Testing as a Service (PTaaS) in New Gartner® Report

New York, United States, 15th October 2025, CyberNewsWire...

7AI score
SaveExploits0
Circl
Circl
added 2025/10/15 3:31 p.m.9 views

CVE-2025-61974

creationtimestamp| type| source ---|---|--- 2025-10-15 15:31:29+00:00| seen| https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f 2025-10-16 09:05:24+00:00| seen| https://circl.lu/pub/tr-96/ 2025-10-17 13:38:40+00:00| seen|...

8.7CVSS4.8AI score0.00429EPSS
SaveExploits0References3
Circl
Circl
added 2025/10/15 9:9 a.m.10 views

CVE-2025-39977

creationtimestamp| type| source ---|---|--- 2025-10-15 09:09:15+00:00| seen| https://gist.github.com/Darkcrai86/31c5f5d1745c6217f5fc95fc4f302f8a 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

7.8CVSS7.1AI score0.0014EPSS
SaveExploits0References7
CVE
CVE
added 2025/10/15 8:25 a.m.32 views

CVE-2025-10310

The WordPress plugin Rich Snippet Site Report (Rich Snippet Site Report) is affected by CVE-2025-10310: SQL Injection via the last parameter in versions up to and including 2.0.0105. The issue arises from insufficient escaping of user-supplied input and inadequate preparation of the SQL query, en...

4.9CVSS6.3AI score0.00333EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/15 8:25 a.m.12 views

CVE-2025-10310 Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

4.9CVSS0.00333EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/15 8:25 a.m.3 views

CVE-2025-10310 Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

4.9CVSS6.3AI score0.00333EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/15 8:25 a.m.7 views

EUVD-2025-34567

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

4.9CVSS6.2AI score0.00333EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/15 7:58 a.m.7 views

CVE-2025-39993 media: rc: fix races with imon_disconnect()

In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imondisconnect Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free in createpipe include/linux/usb.h:1945 inline BUG: KASAN: use-after-free in sendpacket+0xa2d/0xbc0...

7.8CVSS6.2AI score
SaveExploits0References12
Patchstack
Patchstack
added 2025/10/15 12:45 a.m.9 views

WordPress Rich Snippet Site Report plugin <= 2.0.0105 - Authenticated (Admin+) SQL Injection vulnerability

Authenticated Admin+ SQL Injection vulnerability discovered by johska in WordPress Theme Rich Snippet Site Report versions = 2.0.0105...

4.9CVSS8AI score0.00333EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/14 9:49 p.m.22 views

CVE-2025-62365

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in reportthis function in librenms/includes/functions.php. The reportthis function had improper filtering htmlentities function was incorrectly use in a href environment, which...

6.9CVSS6.2AI score0.00231EPSS
SaveExploits1References1
Lenovo
Lenovo
added 2025/10/14 4:11 p.m.7 views

Lenovo Universal Device Client (UDC) Vulnerability - Lenovo Support US

No description provided...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/10/14 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-39664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient escaping in the report scheduler within Checkmk 2.4.0p13, 2.3.0p38, 2.2.0p46 and 2.1.0 EOL allows authenticated attackers to define the storage...

7.1CVSS5.9AI score0.00647EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2025/10/13 10:11 p.m.15 views

LibreNMS is vulnerable to Reflected-XSS in `report_this` function

Summary Reflected-XSS in reportthis function in librenms/includes/functions.php Details Recently, it was discovered that the reportthis function had improper filtering htmlentities function was incorrectly used in a href environment, which caused the projectissues parameter to trigger an XSS...

6.9CVSS6.6AI score0.00231EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/13 9:43 p.m.2 views

CVE-2025-62365 LibreNMS vulnerable to Reflected-XSS in `report_this` function

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in reportthis function in librenms/includes/functions.php. The reportthis function had improper filtering htmlentities function was incorrectly use in a href environment, which...

6.9CVSS5.8AI score0.00231EPSS
SaveExploits1References2
CVE
CVE
added 2025/10/13 9:43 p.m.34 views

CVE-2025-62365

CVE-2025-62365 affects LibreNMS (LibreNMS/librenms) prior to version 25.7.0. The vulnerability is a reflected XSS in the function report_this (librenms/includes/functions.php) caused by improper filtering of user input, specifically the incorrect use of htmlentities in a href context, which allow...

6.9CVSS5.8AI score0.00231EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2025/10/13 9:43 p.m.10 views

EUVD-2025-34114

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in reportthis function in librenms/includes/functions.php. The reportthis function had improper filtering htmlentities function was incorrectly use in a href environment, which...

6.9CVSS5.7AI score0.00231EPSS
SaveExploits1References3
OSV
OSV
added 2025/10/13 9:43 p.m.14 views

CVE-2025-62365 LibreNMS vulnerable to Reflected-XSS in `report_this` function

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in reportthis function in librenms/includes/functions.php. The reportthis function had improper filtering htmlentities function was incorrectly use in a href environment, which...

6.9CVSS6.3AI score
SaveExploits0References4
Rows per page
Query Builder