CVE-2025-21524

CVE-2025-21524 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Monitoring and Diagnostics SEC component. Affected are versions prior to 9.2.9.0; an unauthenticated attacker with network access over HTTP can compromise JD Edwards EnterpriseOne Tools, potentially taking over the too...

CVE-2025-21503

CVE-2025-21503 is a MySQL Server InnoDB vulnerability affecting Oracle MySQL. Affected: InnoDB component in versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. Description from connected advisories: exploitation can be network-accessible via multiple protocols and may cause the serve...

Exploit for Use After Free in Microsoft

content This is a proof-of-concept for CVE-2025-21298 - Wind...

CVE-2025-21268

MapUrlToZone Security Feature Bypass Vulnerability...

Phoenix SecureCore 代码问题漏洞

Phoenix SecureCore is a computer based input/output system from Phoenix Contact Phoenix of Germany. A code issue vulnerability exists in Phoenix SecureCore that arises from an improperly checked exception or anomaly that allows input data manipulation...

Advisory ROSA-SA-2025-2565

software: mcpp 2.7.2 OS: ROSA-CHROME packageevrstring: mcpp-2.7.2-14 CVE-ID: CVE-2019-14274 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Heap-based buffer overflow vulnerability in MCPP in domsg in support.c. CVE-STATUS: The vulnerability has been resolved CVE-REV: To close the vulnerability, run the...

CVE-2025-23125

CVE-2025-23125 is rejected/not used and does not represent an active vulnerability.

PT-2025-1021 · Cisco · Cisco Thousandeyes Endpoint Agent

Name of the Vulnerable Software and Affected Versions: Cisco ThousandEyes Endpoint Agent for macOS and RoomOS affected versions not specified Description: A vulnerability in the certification validation routines of the affected software could allow an unauthenticated, remote attacker to intercept...

PT-2025-1037 · Ibm · Ibm Cognos Controller +1

Name of the Vulnerable Software and Affected Versions: IBM Cognos Controller versions 11.0.0 through 11.0.1 IBM Controller version 11.1.0 Description: The issue is related to the error reporting mechanism in IBM Cognos Controller and IBM Controller, which could allow a remote attacker to obtain...

PT-2025-2333 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

PT-2025-30759

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 6.16.0-20250531.rc0.git0.69b3a602feac.63.fc42.s390x+debug and earlier. Description A flaw exists in the Linux kernel related to handling in atomic within the do secure storage access function. User space accesses to...

curl: Git repository found

Summary: Hello team , When i research I found domain vuln to downliad git repository and i will explain that. Steps To Reproduce: 1. Add DotGit extention on your browser 2. Now try to access to that domain https://curl.dev/ 3. You will show that extention is alert and can download that bucket...

PT-2024-32441 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak. Successful exploitation of this issue could cause information to leak. Recommendations: At the moment, there is no information about a...

CVE-2024-9427

creationtimestamp| type| source ---|---|--- 2024-12-24 04:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzliem3642m 2024-12-24 06:02:15+00:00| seen| https://t.me/cvedetector/13550 2025-06-11 00:34:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18031...

CVE-2024-53240

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues...

PT-2024-9977

Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks Freedom, Autodesk Navisworks Simulate, and Autodesk Navisworks Manage affected versions not specified Description: The issue is related to a Memory Corruption vulnerability caused by the improper handling of DWFX files in...

UBUNTU-CVE-2024-54152

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

PT-2024-18617

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2024-34684 · Unknown · Hdc Module

Name of the Vulnerable Software and Affected Versions: HDC module affected versions not specified Description: The issue is related to the lack of verification of input parameters in the HDC module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the...

The vulnerability of the formEasySetPassword function in the D-Link DIR-619L router’s software allows a hacker to execute arbitrary code.

The vulnerability of the formEasySetPassword function in the D-Link DIR-619L router’s software lies in the fact that the execution of the operation is carried out outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the curTime...