Linux Distros Unpatched Vulnerability : CVE-2017-11448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory...

Linux Distros Unpatched Vulnerability : CVE-2016-2781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters...

Linux Distros Unpatched Vulnerability : CVE-2017-15016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c. CVE-2017-15016 Note that Nessus relies on the presence ...

CVE-2025-26202: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...

CVE-2019-1815: Exposure of Sensitive Information to an Unauthorized Actor

A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security appliance models that may allow unauthenticated individuals to access and download logs containing sensitive, privileged device information. The vulnerability is due to improper...

Linux Distros Unpatched Vulnerability : CVE-2017-15227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels from the query list, resulting in...

CVE-2024-51949

creationtimestamp| type| source ---|---|--- 2025-03-03 23:56:32+00:00| seen| https://t.me/cvedetector/19424 2025-04-10 19:49:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11325...

CVE-2025-1878

creationtimestamp| type| source ---|---|--- 2025-03-03 20:49:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7azahr23 2025-03-03 21:24:39+00:00| seen| https://t.me/cvedetector/19399 2025-03-03 21:46:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/1141006902539272...

CVE-2025-25939

creationtimestamp| type| source ---|---|--- 2025-03-03 20:49:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7alsrr23 2025-03-03 21:24:33+00:00| seen| https://t.me/cvedetector/19395 2025-08-16 01:45:15+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19...

CVE-2025-23493

creationtimestamp| type| source ---|---|--- 2025-03-03 20:30:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6271 2025-08-18 18:31:00+00:00| seen| MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7...

CVE-2025-27264

creationtimestamp| type| source ---|---|--- 2025-03-03 18:03:48+00:00| seen| https://t.me/cvedetector/19367 2025-08-19 13:26:45+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

CVE-2024-43169

creationtimestamp| type| source ---|---|--- 2025-03-03 17:49:05+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099758348614556 2025-03-04 19:33:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6401...

CVE-2025-27417 WeGIA Contains a Stored Cross-Site Scripting (XSS) in 'adicionar_status_atendido.php' via the 'status' parameter

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarstatusatendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...

CVE-2025-26967

creationtimestamp| type| source ---|---|--- 2025-03-03 14:30:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6216 2025-03-03 15:48:54+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285750415310 2026-04-01 21:28:56+00:00| seen|...

CVE-2025-25130

Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Traversal.This issue affects Delete Comments By Status: from n/a through = 2.1.1...

CVE-2025-25124

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devu Status Updater fb-status-updater allows Reflected XSS.This issue affects Status Updater: from n/a through = 1.9.2...

CVE-2025-25130

CVE-2025-25130 corresponds to a Relative Path Traversal that enables unauthenticated PHP Local File Inclusion in the WordPress plugin Delete Comments By Status (affected: Delete Comments By Status, versions

CVE-2025-25130 WordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerability

Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Traversal.This issue affects Delete Comments By Status: from n/a through = 2.1.1...

CVE-2025-25130 WordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerability

Relative Path Traversal vulnerability in NotFound Delete Comments By Status allows PHP Local File Inclusion. This issue affects Delete Comments By Status: from n/a through 2.1.1...

CVE-2025-25124 WordPress Status Updater Plugin <= 9.21 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devu Status Updater allows Reflected XSS. This issue affects Status Updater: from n/a through 1.9.2...