1723 matches found
CVE-2025-42992
SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in potential privilege escalation. This has high impact on...
ROS-20250710-12
A vulnerability in the Libexif library for grammar parsing EXIF files is related to an optimization of the compiler optimization that removes buffer overflow protection in libexif. Exploitation of the vulnerability could Allow an attacker acting remotely to execute arbitrary code on the target...
CVE-2025-53546 Folo allows secrets exfiltration via `pull_request_target`
Folo organizes feeds content into one timeline. Using pullrequesttarget on .github/workflows/auto-fix-lint-format-commit.yml can be exploited by attackers, since untrusted code can be executed having full access to secrets from the base repo. By exploiting the vulnerability is possible to...
CVE-2025-7215 FNKvision FNK-GU2 wpa_supplicant.conf cleartext storage
A vulnerability, which was classified as problematic, has been found in FNKvision FNK-GU2 up to 40.1.7. Affected by this issue is some unknown functionality of the file /rom/wpasupplicant.conf. The manipulation leads to cleartext storage of sensitive information. It is possible to launch the atta...
Exploit for CVE-2024-9014
CVE-2024-9014 - pgAdmin 4 OAuth2 Authentication Bypass Exploit...
CVE-2025-42965
SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration. By analysing response times for various IP addresses and ports, the attacker can infer valid network endpoints. Successful exploitati...
Microsoft Windows Routing and Remote Access Service 安全漏洞
Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Access...
CVE-2025-7117 UTT HiPER 840G websWhiteList buffer overflow
A vulnerability classified as critical was found in UTT HiPER 840G up to 3.1.1-190328. This vulnerability affects unknown code of the file /goform/websWhiteList. The manipulation of the argument addHostFilter leads to buffer overflow. The attack can be initiated remotely. The exploit has been...
CVE-2025-53171
Huawei HarmonyOS is affected by a stack overflow risk when parsing vector images during file preview. The vulnerability is described for HarmonyOS versions 5.0.1 and 5.1.0 and is exploited via the file preview function. Several sources confirm the issue and note the impact as related to file prev...
Exploit for CVE-2025-32023
CVE-2025-32023 PoC & Exploit for CVE-2025-32023 GHSA-rp2m-q...
CVE-2025-6752
A vulnerability has been found in Linksys WRT1900ACS, EA7200, EA7450 and EA7500 up to 20250619 and classified as critical. This vulnerability affects the function SetDefaultConnectionService of the file /upnp/control/Layer3Forwarding of the component IGD. The manipulation of the argument...
freeSSHd 1.0.9 - Denial of Service (DoS)
Exploit Title: freeSSHd 1.0.9 - Denial of Service DoS Date: 2024-01-13 Discovery by: Fernando Mengali Linkedin: https://www.linkedin.com/in/fernando-mengali/ Software Link: https://www.exploit-db.com/apps/be82447d556d60db55053d658b4822a8-freeSSHd.exe Version: 1.0.9 Tested on: Window XP Profession...
Citrix Releases Emergency Patches for Actively Exploited CVE-2025-6543 in NetScaler ADC
Citrix has released security updates to address a critical flaw affecting NetScaler ADC that it said has been exploited in the wild. The vulnerability, tracked as CVE-2025-6543 , carries a CVSS score of 9.2 out of a maximum of 10.0. It has been described as a case of memory overflow that could...
CVE-2025-48463
Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering...
CVE-2025-6401
CVE-2025-6401 affects TOTOLINK N300RH (version 6.1c.1390 B20191101). The issue resides in the HTTP POST Message Handler, specifically the file /boafrm/formFilter, where manipulation of the url parameter leads to a denial of service. Exploitation has been disclosed publicly per multiple sources. P...
CVE-2025-49970
Missing Authorization vulnerability in sparklewpthemes Hello FSE Blog hello-fse-blog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hello FSE Blog: from n/a through = 1.0.6...
PT-2025-28194 · Gnu +1 · Gpac +1
Уязвимость функции gf dash group get audio channels media tools/dash client.c утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием указателей при обработке DASH-манифестов. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код или вызвать отказ в обслужива...
CVE-2025-4404
CVE-2025-4404/7493 describe a privilege-escalation in FreeIPA: failure to validate the uniqueness of krbCanonicalName (admin@REALM, later root@REALM in some advisories) allows creation of services with the realm admin name and obtaining a Kerberos ticket that authenticates as admin, enabling admi...
CVE-2025-30220 GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling
GeoServer is an open source server that allows users to share and edit geospatial data. GeoTools Schema class use of Eclipse XSD library to represent schema data structure is vulnerable to XML External Entity XXE exploit. This impacts whoever exposes XML processing with gt-xsd-core involved in...