3852 matches found
CVE-2025-30874 WordPress Specific Content For Mobile plugin <= 0.5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Jose Mortellaro Specific Content For Mobile specific-content-for-mobile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Specific Content For Mobile: from n/a through = 0.5.3...
WordPress plugin Specific Content For Mobile 安全漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPre...
CVE-2025-2499
CVE-2025-2499 affects Devolutions Remote Desktop Manager for Windows. The issue is a client-side access control bypass in the permission component, allowing an authenticated user to bypass specific restrictions (View Password, Edit Asset, Edit Permissions) by performing certain actions. Affected ...
CVE-2025-2596
Session logout could be overwritten in Checkmk GmbH's Checkmk versions 2.3.0p30, 2.2.0p41, and 2.1.0p49 EOL...
CVE-2025-27833
creationtimestamp| type| source ---|---|--- 2025-03-25 23:40:44+00:00| seen| https://t.me/cvedetector/21128 2025-03-26 01:04:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llalpb2ott26...
CVE-2025-30162
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who use Gateway API for Ingress for some services and use LB-IPAM or BGP for LB Service implementation and use network policies to block egress traffic from workloads in a namespace to...
ChuanhuChatGPT 安全漏洞
ChuanhuChatGPT is an application that provides a lightweight and easy-to-use web GUI and many additional features for a wide range of LLMs such as ChatGPT. A denial of service vulnerability exists in ChuanhuChatGPT version 20240918, which can be exploited by an attacker to cause the system to...
CVE-2025-2200
SQL injection vulnerability in the IcProgreso Innovación y Cualificación plugin. This vulnerability allows an attacker to obtain, update and delete data from the database by injecting an SQL query on the parameters user, id, idGroup, startdate and enddate in the endpoint...
CVE-2025-2320
creationtimestamp| type| source ---|---|--- 2025-03-14 23:06:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114163293011904157 2025-03-15 00:00:40+00:00| seen| Telegram/eCM4aHKdUiBHB9OwhsqXkdKvxoX4-6jxPypGuK3VSGlLfxU 2025-03-15 00:51:34+00:00| seen|...
AZL-58644 CVE-2025-24855 affecting package libxslt for versions less than 1.1.34-8
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...
CVE-2025-24201
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4...
CVE-2025-2117
creationtimestamp| type| source ---|---|--- 2025-03-09 08:38:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6961 2025-03-09 10:38:05+00:00| seen| Telegram/fsGqKV06VpR0bxSWxecnbwegtwThBTfbJKjUURkFe7hwZz6P 2025-03-09 10:59:53+00:00| seen|...
BIT-ELK-2025-25015 Kibana arbitrary code execution via prototype pollution
Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions = 8.15.0 and 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users tha...
SUSE CVE-2025-1922
Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2025-27657
creationtimestamp| type| source ---|---|--- 2025-03-06 00:00:23+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbo25g2e 2025-03-06 12:00:16+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzpjujf2u 2025-04-15 21:56:06+00:00| published-proof-of-concept...
CVE-2025-26699
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...
CVE-2025-25015
CVE-2025-25015 – Kibana prototype pollution leading to arbitrary code execution . Affected: Kibana versions >= 8.15.0 and
Linux Distros Unpatched Vulnerability : CVE-2024-44966
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: binfmtflat: Fix corruption when not offsetting data start Commit 04d82a6d0881 binfmtflat:...
CVE-2025-27425
creationtimestamp| type| source ---|---|--- 2025-03-04 14:06:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114104546018145703 2025-03-04 15:50:36+00:00| seen| https://t.me/cvedetector/19497 2025-08-19 13:26:45+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...
CVE-2025-27278
creationtimestamp| type| source ---|---|--- 2025-03-03 18:03:36+00:00| seen| https://t.me/cvedetector/19360 2025-03-03 18:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljikjrveuh2i 2025-08-19 13:26:46+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...