CVE-2025-69542

creationtimestamp| type| source ---|---|--- 2026-01-09 17:43:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115866375540072178 2026-01-09 18:44:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbz5pebl222o 2026-01-09 22:15:47+00:00| published-proof-of-concept|...

CVE-2025-70161

creationtimestamp| type| source ---|---|--- 2026-01-09 16:52:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115866178180399766 2026-01-09 18:47:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbz5tto4j62m 2026-01-12 18:01:14+00:00| seen|...

CVE-2025-13717

creationtimestamp| type| source ---|---|--- 2026-01-09 13:26:56+00:00| seen| https://gist.github.com/Darkcrai86/1d69ce62eb6a596f6b8c86840faa80a0 2026-01-09 15:24:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbysk5s5ma2e...

CVE-2023-49410

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function via the function setwanstatus...

CVE-2023-31851

Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...

CVE-2023-31114

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause unintended querying of the SIM status via a crafted application...

CVE-2021-28703

grant table v2 status pages may remain accessible after de-allocation take two Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated whe...

CVE-2022-23232

StorageGRID formerly StorageGRID Webscale versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited could allow disabled, expired, or locked external user accounts to access S3 data to which they previously had access. StorageGRID 11.6.0 obtains the user accoun...

CVE-2022-42990

Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/all-orders.php?status=Cancelled%20by%20Customer...

CVE-2022-31021

Ursa is a cryptographic library for use with blockchains. A weakness in the Hyperledger AnonCreds specification that is not mitigated in the Ursa and AnonCreds implementations is that the Issuer does not publish a key correctness proof demonstrating that a generated private key is sufficient to...

CVE-2022-0421

The Five Star Restaurant Reservations WordPress plugin before 2.4.12 does not have authorisation when changing whether a payment was successful or failed, allowing unauthenticated users to change the payment status of arbitrary bookings. Furthermore, due to the lack of sanitisation and escaping,...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

CVE-2020-12472

MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...

CVE-2025-13521

The WP Status Notifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin...

CVE-2025-40695

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'remark', 'status' and 'takeaction' parameters via POST at the endpoint '/ofrs/admin/request-details.php'. This...

CVE-2025-14574

creationtimestamp| type| source ---|---|--- 2026-01-09 09:07:56+00:00| seen| https://gist.github.com/Darkcrai86/5eee03893e126513764630331fec395f...

CVE-2024-39325

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9,...

CVE-2024-39891

In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024. Specifically, the endpoint accepted a stream of requests containing phone numbers, and...

CVE-2023-45334

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2025-15057

creationtimestamp| type| source ---|---|--- 2026-01-09 08:03:00+00:00| seen| Telegram/baYAHbqMqSalDW7Jh5vLcnZYQr2csVL8CwQNknT-bM3nPo8 2026-01-09 08:41:55+00:00| seen| https://gist.github.com/Darkcrai86/3514d22fb35676a07c991248d6731f3a...