CVE-2025-34031

A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsmol.php. The script directly passes user input to the filegetcontents function without proper validation, allowing attackers to read arbitrary files from the server's filesystem ...

VulnCheck KEV: CVE-2025-34033

An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...

VulnCheck KEV: CVE-2025-34034

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...

CVE-2025-34024

An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint improperly handles user-supplied input to the command parameter. An authenticated attacker can inject shell commands using shell metacharacter...

CVE-2025-34029

An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler. The /goform/formSysCmd endpoint exposes a system command interface through the sysCmd parameter. A remote authenticated attacker can submit arbitrary shell...

CVE-2025-25038

An OS command injection vulnerability exists in MiniDVBLinux version 5.4 and earlier. The system’s web-based management interface fails to properly sanitize user-supplied input before passing it to operating system commands. A remote unauthenticated attacker can exploit this vulnerability to...

CVE-2021-24442

creationtimestamp| type| source ---|---|--- 2025-06-06 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-06 2025-06-07 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-07 2025-06-08 00:00:00+00:00| seen| The Shadowserver...

CVE-2020-10548

creationtimestamp| type| source ---|---|--- 2025-06-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-06-04 2025-06-06 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-06-06 2026-03-17 00:00:00+00:00| exploited| The...

CVE-2023-34659

creationtimestamp| type| source ---|---|--- 2025-05-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-05-30 2025-07-07 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-07-07 2025-11-09 00:00:00+00:00| exploited| The...

CVE-2024-5827

creationtimestamp| type| source ---|---|--- 2025-05-12 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-05-12 2025-06-26 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-06-26 2025-11-11 00:00:00+00:00| exploited| The...

CVE-2022-1390

creationtimestamp| type| source ---|---|--- 2025-05-10 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-05-10 2026-05-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-05-18 2026-06-06 00:00:00+00:00| exploited| The Shadowserver...

CVE-2025-2778

creationtimestamp| type| source ---|---|--- 2025-05-07 14:15:11+00:00| seen| https://infosec.exchange/users/shadowserver/statuses/114466967388160257 2025-05-07 14:16:50+00:00| seen| https://bsky.app/profile/shadowserver.bsky.social/post/3lolll3ln2k2p 2025-05-07 14:16:52+00:00| seen|...

CVE-2025-3987

creationtimestamp| type| source ---|---|--- 2025-04-27 22:09:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13641 2025-04-28 01:31:07+00:00| seen| https://t.me/cvedetector/23864 2025-10-19 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2022-31793

creationtimestamp| type| source ---|---|--- 2025-04-20 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-04-20 2026-06-23 14:06:15+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/05c68957-3684-432f-b134-714c8bc8030f 2026-06-30...

CVE-2023-4450

creationtimestamp| type| source ---|---|--- 2025-03-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-03-29 2025-07-07 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-07-07 2025-07-29 00:00:00+00:00| exploited| The...

CVE-2023-46347

creationtimestamp| type| source ---|---|--- 2025-03-27 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-03-27 2025-07-07 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-07-07 2026-06-19 12:46:01+00:00| exploited|...

CVE-2025-2825

creationtimestamp| type| source ---|---|--- 2025-03-26 16:25:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8885 2025-03-26 16:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llc7z6h24d2u 2025-03-26 18:04:07+00:00| seen| https://t.me/cvedetector/21185 2025-03-26...

CVE-2019-9762

creationtimestamp| type| source ---|---|--- 2025-03-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-03-12 2025-05-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-05-08 2025-05-08 00:00:00+00:00| exploited| The Shadowserver...

CVE-2018-7700

creationtimestamp| type| source ---|---|--- 2025-03-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-03-12 2025-04-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-04-05 2025-05-19 00:00:00+00:00| seen| The Shadowserver...

CVE-2020-5775

creationtimestamp| type| source ---|---|--- 2025-03-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-03-09 2026-06-23 14:06:19+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/06cf3e8b-5bea-44c8-9546-6e0aa85bffd2...