CVE-2014-6038

Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability. Fixed in EventLog Analyzer 10.0 Build 10000...

CVE-2012-4926

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...

CVE-2005-0444

VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code...

CVE-2002-2148

Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard UDP port 9 packet, which causes the device to le...

CVE-2021-24890

creationtimestamp| type| source ---|---|--- 2025-05-21 19:42:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17176...

CVE-2025-48204

creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4anh5bx2k 2025-05-21 20:41:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17200...

CVE-2025-4907

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2022-41841

creationtimestamp| type| source ---|---|--- 2025-05-20 19:42:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17052...

CVE-2025-37979

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overflow Case values introduced in commit 5f78e1fb7a3e "ASoC: qcom: Add driver support for audioreach solution" cause out of bounds access in arrays of sc7280 driver data e.g. in case...

CVE-2025-39395

CVE-2025-39395 affects the WordPress plugin WPAMS (Apartment Management System) versions n/a through 44.0 (17-08-2023). The issue is an SQL Injection due to improper neutralization of specific elements in SQL commands. CVSS 3.1/3.1 vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L, base score 9.3 (CRIT...

CVE-2025-4712

creationtimestamp| type| source ---|---|--- 2025-05-19 14:38:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16848...

CVE-2025-4906

creationtimestamp| type| source ---|---|--- 2025-05-19 02:38:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16788 2025-05-19 05:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissiqwkl2p...

CVE-2025-37890

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report 1, we have a UAF case when an hfsc class has a netem child qdisc. The crux of the issue is that hfsc is assuming that...

CVE-2025-4825 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDMZ buffer overflow

A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...

Privacy-Preserving AI for Encrypted Medical Imaging: a Framework for Secure Diagnosis and Learning

The rapid integration of Artificial Intelligence AI into medical diagnostics has raised pressing concerns about patient privacy, especially when sensitive imaging data must be transferred, stored, or processed. In this paper, we propose a novel framework for privacy-preserving diagnostic inferenc...

CVE-2024-50048

creationtimestamp| type| source ---|---|--- 2025-05-16 07:33:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16646 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-41595

creationtimestamp| type| source ---|---|--- 2025-05-14 18:31:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16355...

CVE-2022-3066

creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16158...

CVE-2025-24510

A vulnerability has been identified in MS/TP Point Pickup Module All versions. Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the same BACnet network to send a specially crafted MSTP message that results in a denial of service...

CVE-2025-30011

creationtimestamp| type| source ---|---|--- 2025-05-13 03:12:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lozjaavm7s2w 2025-05-13 05:30:32+00:00| seen| https://t.me/cvedetector/25157...