27474 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-14310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an issue on grub2 before version 2.06 at function readsectionasstring. It expects a font name to be at max UINT32MAX - 1 length in bytes but it doesn't...
CVE-2025-0082
In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
GHSA-FH55-Q5PJ-PXGW
creationtimestamp| type| source ---|---|--- 2025-08-26 17:13:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115096183396758767...
Exploit for Out-of-bounds Write in Php
Task Management APP CVE-2019-11043 Lab Minimal PHP app with...
CERTFR-2025-ALE-012
creationtimestamp| type| source ---|---|--- 2025-08-26 14:27:17+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115095531158127870 2025-12-05 10:11:20+00:00| patched|...
CVE-2025-9481
creationtimestamp| type| source ---|---|--- 2025-08-26 13:52:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115095395017724011...
CVE-2025-9482
creationtimestamp| type| source ---|---|--- 2025-08-26 13:52:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115095395017724011...
CVE-2025-38676
creationtimestamp| type| source ---|---|--- 2025-08-26 13:23:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115095281776659037 2025-08-27 09:00:04+00:00| published-proof-of-concept| Telegram/7YsezDaia3BA-XoFQp1rAm9DJWkOqrM1x1h9TBjHQNo0SrQ 2025-08-29 21:02:28+00:00| seen|...
CVE-2025-53811 TCC Bypass via misconfigured Node fuses in Mosh-Pro
The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC Transparency, Consent, and Control permissions. Acquired resource access is limited to previously granted...
CVE-2025-53811
CVE-2025-53811 describes a TCC-related bypass in Mosh-Pro on macOS caused by misconfigured RunAsNode fuses. A local, unprivileged attacker could execute arbitrary code that runs with Mosh-Pro’s TCC permissions, limited to permissions the user has already granted. Additional resource access beyond...
MINI-F36F-Q47X-GPF6
Bulletin has no description...
CVE-2025-43216
creationtimestamp| type| source ---|---|--- 2025-08-26 08:16:53+00:00| seen| https://vulnerability.circl.lu/bundle/c1aa3b44-ae54-436b-b3c3-a88194ecb70e...
CVE-2025-41702
creationtimestamp| type| source ---|---|--- 2025-08-26 07:23:51+00:00| seen| https://infosec.exchange/users/certvde/statuses/115093866501139038 2025-08-31 03:14:02+00:00| published-proof-of-concept| https://t.me/icscert/1309...
CVE-2024-8860
The CVE-2024-8860 case concerns the WordPress Tourfic plugin (versions up to and including 2.14.5). The vulnerability arises from missing capability checks in multiple functions (tf_order_status_email_resend_function, tf_visitor_details_edit_function, tf_checkinout_details_edit_function, tf_order...
CVE-2024-8860 Tourfic <= 2.14.5 - Missing Authorization in Multiple Functions
The Tourfic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tforderstatusemailresendfunction, tfvisitordetailseditfunction, tfcheckinoutdetailseditfunction, tforderstatuseditfunction, tforderbulkactioneditfunction,...
CVE-2025-53511
creationtimestamp| type| source ---|---|--- 2025-08-26 06:30:05+00:00| seen| https://infosec.place/objects/adf9eba9-608a-49fd-8326-3ef6bde042c7...
CVE-2025-9430
creationtimestamp| type| source ---|---|--- 2025-08-26 05:04:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbqhtks6x2p...
CVE-2025-9432
creationtimestamp| type| source ---|---|--- 2025-08-26 05:00:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbqb4nlsd2p...