1943 matches found
Control iD RHiD 代码注入漏洞
Control iD RHiD is a complete system from Control iD that allows point computing in the cloud. A code injection vulnerability exists in Control iD RHiD version 25.2.25.0, which stems from the fact that incorrect manipulation of the parameter message can lead to cross-site scripting...
[SECURITY] Fedora 40 Update: python-spotipy-2.25.1-1.fc40
A light weight Python library for the Spotify Web API...
CVE-2025-2094
A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launche...
CVE-2025-27670
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Signature Validation OVE-20230524-0014...
CVE-2025-25012
creationtimestamp| type| source ---|---|--- 2025-03-06 04:35:53+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ljoo73xra22j 2025-03-06 06:11:01+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3ljotjeyg422l 2025-03-06 11:33:00+00:00| seen|...
SAMSUNG Watch 安全漏洞
SAMSUNG Watch is a smartwatch from Samsung South Korea. A security vulnerability exists in SAMSUNG Watch versions prior to SMR Mar-2025 Release 1, which stems from a default permission error that could allow a local attacker to access data in the Galaxy Watch Gallery...
CVE-2025-25362
creationtimestamp| type| source ---|---|--- 2025-03-05 20:36:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6613 2025-03-05 23:39:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5nlello2h 2025-03-06 01:18:24+00:00| seen|...
CVE-2025-23502
creationtimestamp| type| source ---|---|--- 2025-03-05 18:30:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6570...
CVE-2025-23496
creationtimestamp| type| source ---|---|--- 2025-03-05 18:30:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6568...
CVE-2025-23515
CVE-2025-23515 corresponds to a Missing Authorization vulnerability in the WordPress plugin ts-tree, affecting ts-tree versions up to 0.1.1. The vulnerability is described as Arbitrary Content Deletion due to insufficient access control (Authenticated/Subscriber+ level). Public data confirms the ...
CVE-2025-1830
creationtimestamp| type| source ---|---|--- 2025-03-02 20:28:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6109 2025-03-02 22:47:43+00:00| seen| https://t.me/cvedetector/19270 2025-03-02 23:38:59+00:00| seen|...
CVE-2025-27400
creationtimestamp| type| source ---|---|--- 2025-02-28 16:27:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5917 2025-02-28 19:32:31+00:00| seen| https://t.me/cvedetector/19174 2025-08-22 13:26:18+00:00| seen| MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80 2026-04-15...
CVE-2025-21739
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix use-after free in init error and remove paths devmblkcryptoprofileinit registers a cleanup handler to run when the associated platform- device is being released. For UFS, the crypto private data and pointers...
CVE-2025-21808
In the Linux kernel, the following vulnerability has been resolved: net: xdp: Disallow attaching device-bound programs in generic mode Device-bound programs are used to support RX metadata kfuncs. These kfuncs are driver-specific and rely on the driver context to read the metadata. This means the...
Exploit for CVE-2025-1094
CVE-2025-1094: SQL Injection to RCE via WebSocket 🚀 This repo...
CVE-2025-1295
creationtimestamp| type| source ---|---|--- 2025-02-27 06:24:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5655 2025-02-27 07:48:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114074747530022854 2025-02-27 08:42:05+00:00| seen| https://t.me/cvedetector/19020 2025-02-...
CVE-2025-21783
creationtimestamp| type| source ---|---|--- 2025-02-27 06:11:27+00:00| seen| https://t.me/cvedetector/19004...
CVE-2025-21730
creationtimestamp| type| source ---|---|--- 2025-02-27 04:30:09+00:00| seen| https://t.me/cvedetector/18976 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2025-21745
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @blockclass's subsystem refcount leakage blkcgfillrootiostats iterates over @blockclass's devices by classdeviterinit|next, but does not end iterating with classdeviterexit, so causes the class's subsystem...