CVE-2025-45955

CVE-2025-45955 affects the DonWeb/Ferozo hosting platform (PHP environments allowing user-controlled PHP execution). The GitHub exploit details a Server-Side Request Forgery where an attacker uploads and runs a crafted PHP file that, when accessed, performs SSRF against internal endpoints (127.0....

CVE-2016-16113

Publicly available exploit for CVE-2016-16113 exists as a GitHub project (Exploit for CVE-2016-16113) that describes an automated workflow combining CVE-2019-17240 (Authentication bypass) and CVE-2019-16113 (Arbitrary file upload) to achieve remote code execution on Bludit CMS installations. The ...

CVE-2024-45427

CVE-2024-45427 has concrete details in connected documents: PhpSpreadsheet is affected by a stored XSS vulnerability (no affected versions specified in the PT security entry). An exploit exists/released to weaponize this flaw, with an exploit generator hosted on GitHub that injects malicious payl...

CVE-2020-98765

CVE-2020-98765 has concrete connected details: CIRCL lists a published proof-of-concept sighting (Telegram) for this CVE, and a GitHub exploit project titled “Exploit for CVE-2020-98765” exists. The FirmwareForge context within the connected exploit repository notes a match for CVE-2020-98765 inv...

CVE-2025-67435

CVE-2025-67435 is a Zip Slip RCE vulnerability in PluckCMS (Module Management) that allows an authenticated admin to upload a ZIP archive which, if crafted with path traversal, leads to arbitrary file writes and remote code execution. The exploit report documents the vulnerability in PluckCMS 4.7...

CVE-2025-14269

Headlamp Headlamp vulnerability affecting in-cluster deployments with Helm enabled and prior authenticated access (config.enableHelm: true). Versions before 0.39.0 disclose cached credentials via the Helm UI, allowing unauthenticated users to access sensitive Helm release data under the /clusters...

CVE-2025-57459

CVE-2025-57459 has concrete exploit details: a Stored XSS via Malicious File Upload, demonstrated by a GitHub PoC that uploads a PDF containing XSS scripts in metadata. CIRCL shows a Telegram PoC; however, the available documents do not identify affected product/vendor/component/version. The root...

CVE-2025-49173

CVE-2025-49173 has a concrete PoC exploit targeting macOS Mavericks (10.9) Local Privilege Escalation via authorization misconfiguration and improper privilege boundary enforcement. The GitHub exploit describes a local unprivileged user achieving root access under specific conditions; the CIRCL f...

CVE-2025-65321

CVE-2025-65321 affects the Language Sloth Discord bot. The vulnerability resides in directory traversal in the gif() and png() functions (files.py), where the name parameter is unsafely interpolated into file paths (./gif/{name}.gif and ./png/{name}.png), enabling an attacker to read arbitrary se...

CVE-2022-42008

Tesla's Linux-based infotainment system is affected by CVE-2022-42008 via improper access controls in diagnostic interfaces. The PT-2025-47956 entry notes root access can be obtained through physical/diagnostic pathways (e.g., Ethernet) to gain a reverse shell and modify configs for persistence. ...

CVE-2025-63943

CVE-2025-63943 corresponds to a remote SQL injection affecting Grocery Store Management System 1.0 (vendor: anirudhkannan). The vulnerability is in Grocery/search_products.php, where the user-controlled scost parameter is unsafely embedded into SQL queries, enabling attackers to manipulate logic ...

CVE-2022-12345

Technical details for CVE-2022-12345 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for official updates.

CVE-2025-61299

CVE-2025-61299 is documented in connected data as an authenticated command injection affecting Nagios XI 2024R1. A proof-of-concept exploit is published at the GitHub repo referenced, and a public PoC is noted in CIRCL sighting entries (2025-11-07). The available material confirms an authenticate...

CVE-2021-4773

Technical details for CVE-2021-4773 are not publicly available in the provided documents; the CVE entry is reserved. Monitor for updates as information may be added later.

CVE-2025-61472

CVE-2025-61472 has connected exploit data: a PoC for a Linux kernel module vulnerability leading to likely privilege escalation. The exploit is linux-based (exploit.py) and targets a vulnerable kernel version; details of the root cause and affected component are not fully disclosed in the CVE ent...

CVE-2025-60287

PT-2025-44590 document notes multiple SQL injection and remote code execution vulnerabilities, with CVE-2025-60287 and CVE-2025-60291 assigned. CVE-2025-60291 has been publicly released. An exploit/ PoC for CVE-2025-60287 appears in a GitHub repository (Exploit for CVE-2025-60287). No product/ven...

CVE-2022-10270

CVE-2022-10270 has an available PoC exploit in a GitHub repo suggesting a remote code execution vulnerability in a web application, likely Python-based (Flask/Django). The connected Circl sighting indicates a public discussion, but production details (affected product/vendor/version, exact root c...

CVE-2025-60752

Technical details for CVE-2025-60752 are not publicly available in the provided documents; a PoC is referenced, and sightings exist, but no specifics on affected products, versions, or root cause are given. Monitor for updates.

CVE-2025-61620

CVE-2025-61620 is associated with vLLM/OpenAI-Compatible Server where a DoS can be triggered by crafting Jinja templates via chat_template or chat_template_kwargs. The vulnerability arises because the server renders conversation history using a Jinja template in vllm’s serving engine, and dict.up...

CVE-2011-2553

Technical details for CVE-2011-2553 are not publicly available in the provided documents. Monitor for updates as connected sources show an exploit repo and sightings but no official vulnerability specifics.