Cisco Nexus Dashboard Unauthorized Access

The vulnerability of the Cisco Nexus Dashboard, a control panel for analyzing and automating cloud-based data center operations, is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2025-4091

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn33gwwd2l 2025-04-29 16:49:45+00:00| seen| https://t.me/cvedetector/24002 2026-04-13 17:55:16+00:00| seen| Telegram/Rk7hMmIKYATXlhQfFOdK5MJxTVeQfOKjkNlqS7PgiJwldc...

CVE-2025-23375

Dell PowerProtect Data Manager Reporting, versions 19.17, contains an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-23375

Dell PowerProtect Data Manager Reporting, versions 19.17, contains an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-23377

Dell PowerProtect Data Manager Reporting, versions 19.17, 19.18 contains an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs...

CVE-2025-23376

Dell PowerProtect Data Manager Reporting, versions 19.16, 19.17, 19.18, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

CVE-2025-23377

Dell PowerProtect Data Manager Reporting, versions 19.17, 19.18 contains an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs...

Dell PowerProtect Data Manager Reporting security vulnerabilities

Dell PowerProtect Data Manager Reporting is a data protection management software. An information disclosure vulnerability exists in Dell PowerProtect Data Manager Reporting, which arises from the program's failure to properly handle template input and can be exploited by an attacker to obtain...

Dell PowerProtect Data Manager Reporting security vulnerabilities

Dell PowerProtect Data Manager Reporting is a data protection management software. An elevation of privilege vulnerability exists in Dell PowerProtect Data Manager Reporting, which can be exploited by an attacker to gain elevated privileges because the program fails to properly restrict API...

CVE-2025-23376: Improper Neutralization of Special Elements Used in a Template Engine

Dell PowerProtect Data Manager Reporting, versions 19.16, 19.17, 19.18, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

CVE-2025-23375: Incorrect Use of Privileged APIs

Dell PowerProtect Data Manager Reporting, versions 19.17, contains an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-23377: Improper Encoding or Escaping of Output

Dell PowerProtect Data Manager Reporting, versions 19.17, 19.18 contains an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs...

Dell PowerProtect Data Manager Reporting security vulnerabilities

Dell PowerProtect Data Manager Reporting is a data protection management software. Dell PowerProtect Data Manager Reporting suffers from an improper escape vulnerability that stems from the program's failure to properly process output, no details of the vulnerability are available at this time...

Fedora 41 : java-17-openjdk (2025-22226bdb44)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-22226bdb44 advisory. April 2025 CPU Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

Exploit for Code Injection in Foxcms

CVE-2025-29306 - FoxCMS Remote Code Execution Exploit !Pytho...

NetScout nGeniusONE security vulnerabilities

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE versions prior to 6.4.0 b2350 that stems from an authorization mode flaw in the reporting module...

CVE-2025-43864

creationtimestamp| type| source ---|---|--- 2025-04-24 14:55:06+00:00| published-proof-of-concept| https://github.com/remix-run/react-router/security/advisories/GHSA-f46r-rw29-r322 2025-04-25 01:10:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13367 2025-04-25...

CVE-2025-2543

creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13206 2025-04-24 13:03:54+00:00| seen| https://t.me/cvedetector/23666 2025-04-24 14:19:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkvnu3mu724...

CVE-2025-3761

creationtimestamp| type| source ---|---|--- 2025-04-24 07:19:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13192 2025-04-24 09:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkenug2qx2r 2025-04-24 09:48:18+00:00| seen|...