2304 matches found
CVE-2025-52841
creationtimestamp| type| source ---|---|--- 2025-07-02 21:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsz55i5hs22m...
CVE-2025-4381
The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘$id’ variable of the getSpace function in all versions up to, and including, 4.89 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2025-6934
creationtimestamp| type| source ---|---|--- 2025-07-01 07:09:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20008 2025-07-01 09:00:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsvdkcymha2p 2025-07-01 21:00:16+00:00| published-proof-of-concept|...
CVE-2025-32463
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option...
CVE-2025-53416
CVE-2025-53416 affects Delta Electronics DTN Soft via deserialization of untrusted data in the DTN Soft project file parsing, enabling remote code execution. The vulnerability is described as an insecure/deserialization flaw in handling project files, with an impact described as remote code execu...
CVE-2025-53416 File Parsing Deserialization of Untrusted Data in DTN Soft
Delta Electronics DTN Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution...
CVE-2025-40734
creationtimestamp| type| source ---|---|--- 2025-06-30 09:05:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19914 2025-06-30 13:18:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstbi7df4d2p...
CVE-2025-38090
In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/riocm.c: prevent possible heap overwrite In riocmcdevioctlRIOCMCHANSEND - cmchanmsgsend - riocmchsend cmchanmsgsend checks that userspace didn't send too much data but riocmchsend failed to check that userspace se...
CVE-2025-38089
creationtimestamp| type| source ---|---|--- 2025-06-30 07:56:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19908 2025-06-30 11:13:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lst2io2txr2r 2025-07-02 08:43:25+00:00| published-proof-of-concept|...
CVE-2025-0634
Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2...
openSUSE Security Advisory (SUSE-SU-2025:02122-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-6858
A vulnerability was found in HDF5 1.14.6 and classified as problematic. Affected by this issue is the function H5Cflushsingleentry of the file src/H5Centry.c. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the publi...
CVE-2025-6856
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FLreggclist of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...
PT-2025-27381 · Unknown · Sourcecodester Simple Company Website
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Company Website version 1.0 Description: A critical issue affects some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the img argument leads to unrestricted upload. The attack may b...
CVE-2025-53391
The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt6.2.0-1 package has insecure PolicyKit allowany/allowinactive/allowactive settings that allow a local user to escalate their privileges to root...
CVE-2025-6818
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5Ochunkprotect of the file /src/H5Ochunk.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may ...
CVE-2025-38086
In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during miinwayrestart In miinwayrestart the code attempts to call mii-mdioread which is ch9200mdioread. ch9200mdioread utilises a local buffer called "buff", which is initialised with...
PT-2025-27327 · Code Projects · Payroll Management System
Name of the Vulnerable Software and Affected Versions: code-projects Payroll Management System version 1.0 Description: A critical issue has been found in the Payroll Management System, affecting some unknown functionality of the file /Payroll Management System/ajax.php?action=save department. Th...
CVE-2025-40910
creationtimestamp| type| source ---|---|--- 2025-06-27 14:46:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsluz2yedg2i 2025-06-27 20:52:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19785...