2304 matches found
CVE-2025-5899
A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this vulnerability is the function parsevariablesoption of the file utilities/pspp-convert.c. The manipulation leads to free of memory not on the heap. An attack has to be approached...
CVE-2025-5914
creationtimestamp| type| source ---|---|--- 2025-06-09 20:31:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17763 2025-06-09 23:12:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7iuszseb2c 2025-07-24 12:01:38+00:00| seen|...
CVE-2025-5852 Tenda AC6 setPptpUserList formSetPPTPUserList buffer overflow
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been...
Fedora 42 : samba (2025-68d1e02e61)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-68d1e02e61 advisory. Update to Samba 4.22.2 - Security fix for CVE-2025-0620 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
CVE-2025-5790
A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. This vulnerability affects unknown code of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The attack can be initiated...
CVE-2025-5785
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack ma...
CVE-2025-29010 WordPress Behance Portfolio Manager plugin <= 1.7.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Behance Portfolio Manager: from n/a through = 1.7.5...
CVE-2025-49241 WordPress oik plugin <= 4.15.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in bobbingwide oik oik allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects oik: from n/a through = 4.15.1...
CVE-2025-5697 Brilliance Golden Link Secondary System tcCustDeferPosiQuery.htm sql injection
A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcCustDeferPosiQuery.htm. The manipulation of the argument custTradeId leads to sql injection. The...
CVE-2025-5641
A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function rconsisbreaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local...
CVE-2024-24789
creationtimestamp| type| source ---|---|--- 2025-06-05 04:05:14+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3lqtgw6dhi22u...
BELL-CVE-2025-47808
Bulletin has no description...
PT-2025-23645
Name of the Vulnerable Software and Affected Versions quequnlong shiyi-blog versions up to 1.2.1 Description A critical issue has been found in quequnlong shiyi-blog, affecting some unknown processing of the file /dev api/app/album/photos/. This leads to improper authorization, and the attack may...
CVE-2025-30167
Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared %PROGRAMDATA% directory is searched for configuration files SYSTEMCONFIGPATH and SYSTEMJUPYTERPATH, which may allow users to create configuration...
CVE-2025-3951
creationtimestamp| type| source ---|---|--- 2025-06-02 06:31:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5odaztub2 2025-06-02 08:28:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqmeanlu3l2m...
CVE-2024-57459
A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands...
CVE-2025-5380 ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 Image File Upload upload path traversal
A vulnerability, which was classified as critical, has been found in ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 up to 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb. This issue affects some unknown processing of the file /upload/ of the component Image File Upload. The manipulation of the argument File lead...
PT-2025-23281 · WordPress · Browse As
Name of the Vulnerable Software and Affected Versions: Browse As plugin for WordPress versions up to, and including, 0.2 Description: The issue is due to incorrect authentication checking in the IS BA Browse As::notice function with the is ba original user COOKIEHASH cookie value. This allows...
CVE-2025-48473
creationtimestamp| type| source ---|---|--- 2025-05-29 16:42:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqd5v2oah5q2 2025-05-29 17:57:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqdc5ibmwj2w...