25057 matches found
📄 ISPConfig 3.3.0 Cross Site Scripting
ISPConfig version 3.3.0 suffers from a cross site scripting vulnerability in the system status webpage. CVE-2025-52206 Reflected Cross Site Scripting XSS Suggested description ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
SUSE CVE-2025-38474
In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The driver checks for having three endpoints and having bulk in and out endpoints, but not that the third endpoint is interrupt input. Rectify the omission...
CVE-2025-8274
A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=saverecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack can b...
AZL-72974 CVE-2025-38474 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The driver checks for having three endpoints and having bulk in and out endpoints, but not that the third endpoint is interrupt input. Rectify the omission...
AZL-65952 CVE-2025-38474 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The driver checks for having three endpoints and having bulk in and out endpoints, but not that the third endpoint is interrupt input. Rectify the omission...
CVE-2025-38474 usb: net: sierra: check for no status endpoint
In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The driver checks for having three endpoints and having bulk in and out endpoints, but not that the third endpoint is interrupt input. Rectify the omission...
kernel: media: uvcvideo: Fix double free in error path
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvcstatusinit function fails to allocate the inturb, it will free the dev-status pointer but doesn't reset the pointer to NULL. This results in the kfree call in...
GHSA-J63H-HMGW-X4J7
creationtimestamp| type| source ---|---|--- 2025-07-26 04:41:09+00:00| seen| Telegram/gXCO5-js7JL22CNpNmwPmEgyVHCJuf9ILHZP56GOgXOJYQg...
RHSA-2024:1614
creationtimestamp| type| source ---|---|--- 2025-07-26 00:37:37+00:00| seen| Telegram/zvcI4RaoDnIqbZ3YA8XHMZhfSsFQszGzh21dDzQhnYjnw...
CVE-2025-52455
creationtimestamp| type| source ---|---|--- 2025-07-25 19:39:33+00:00| seen| Telegram/XAE-GfYsC18j-flud6jYfKup8MGEYiwAdBb2Pr1P4wDBYo...
CVE-2025-53942 authentik has an insufficient check for account active status during OAuth/SAML authentication
authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set of protocols. In versions 2025.4.4 and earlier, as well as versions 2025.6.0-rc1 through 2025.6.3, deactivated users who registered through OAuth/SAML or linked their accounts to...
CVE-2025-43020
creationtimestamp| type| source ---|---|--- 2025-07-23 01:16:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lultvdlkox2j...
Exploit for CVE-2025-34085
📌 CVE-2025-34085 — Simple File List WordPress Plugin RCE 📌...
CVE-2025-41674
creationtimestamp| type| source ---|---|--- 2025-07-21 10:42:09+00:00| seen| https://infosec.exchange/users/certvde/statuses/114890803062994673 2025-07-21 10:42:30+00:00| seen| https://infosec.exchange/users/certvde/statuses/114890804388115598 2025-07-21 10:46:28+00:00| seen|...
Exploit for Deserialization of Untrusted Data in Microsoft
ZeroPoint.ps1 ⚠ A defensive PowerShell utility to detect an...
CVE-2025-7904
creationtimestamp| type| source ---|---|--- 2025-07-20 20:40:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugdka6ca42v...
CVE-2025-7795
creationtimestamp| type| source ---|---|--- 2025-07-18 19:10:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lub5lh4b3t2i 2025-07-19 21:00:04+00:00| published-proof-of-concept| Telegram/0jvjkPEZnoW0g8cjJAx2BIIU7bcv6ZLASQZj1TPT87LGFs 2025-07-20 07:00:11+00:00|...
CVE-2025-51970
creationtimestamp| type| source ---|---|--- 2025-07-18 15:16:59+00:00| seen| https://gist.github.com/im4x/10738ee219d69024387737fb14cdba9f 2025-07-20 10:12:57+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/44694 2025-07-20 15:00:06+00:00| published-proof-of-concept|...
CVE-2025-7433
creationtimestamp| type| source ---|---|--- 2025-07-17 19:03:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870125851359984 2025-07-18 05:43:48+00:00| seen| https://poliverso.org/objects/0477a01e-b4ff51d2-3ebe177d5dcd7fd6...