4280 matches found
CVE-2025-56801
creationtimestamp| type| source ---|---|--- 2025-10-19 03:00:05+00:00| published-proof-of-concept| Telegram/8nM03Hy1pfJWfEIa0g2-4Thr39zfhDpEe0Vm6CK6uASuGo 2025-10-21 19:43:09+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115413862888090663 2025-10-21 20:21:36+00:00| seen|...
CVE-2025-11270
creationtimestamp| type| source ---|---|--- 2025-10-18 07:37:41+00:00| seen| Telegram/TwcTVJ8Ir5ACNvODW4AnrLq0FUH28Aj4vAmIFbdi7YZg24Y...
CVE-2025-11925
creationtimestamp| type| source ---|---|--- 2025-10-18 01:34:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3gnhfxg2s26...
CVE-2025-11908
The CVE-2025-11908 entry describes a remote, unrestricted file-upload flaw in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The vulnerable component is the uploadFile function under the endpoint /FileDir.do?Action=Upload; malicious manipulation of the File argument enables unrestricted file...
CVE-2025-59150
creationtimestamp| type| source ---|---|--- 2025-10-17 17:52:23+00:00| seen| https://gist.github.com/EbonJaeger/99dd58f015b229c6f25edb5dae784966...
CVE-2025-57876
creationtimestamp| type| source ---|---|--- 2025-10-17 14:35:36+00:00| seen| Telegram/qq4GJz33s8FKffUplgf46UNUYn9845cbHC0RsFQk2z-EJaI...
CVE-2025-55094
creationtimestamp| type| source ---|---|--- 2025-10-17 06:21:27+00:00| seen| Telegram/p-BexpXGTURdfkygzyJQR-I13vjYiDgzo3a5wMAU9QYiOc...
CVE-2025-34514
creationtimestamp| type| source ---|---|--- 2025-10-16 18:21:44+00:00| seen| Telegram/M0dxuX9bAH3VPoEEgSXM0pKSVpYcQkjYtWK1JDEit4904xI...
CVE-2025-9063
creationtimestamp| type| source ---|---|--- 2025-10-16 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-289-01 2025-10-20 13:41:56+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-cisa-ics-security-advisories-av25-682...
CVE-2025-9064
creationtimestamp| type| source ---|---|--- 2025-10-16 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-289-01 2025-10-20 13:41:56+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-cisa-ics-security-advisories-av25-682...
CVE-2025-53858
creationtimestamp| type| source ---|---|--- 2025-10-16 09:17:09+00:00| seen| Telegram/CgaBlzIeYT3ftKHh3YW65c-VPzKpW44WfOq8N1VUhFtZQ...
CVE-2025-41254
creationtimestamp| type| source ---|---|--- 2025-10-16 09:08:51+00:00| seen| https://bsky.app/profile/snicoll.be/post/3m3cfvlbjhc2w 2025-10-16 16:00:31+00:00| seen| https://bsky.app/profile/sambrannen.com/post/3m3d4vndvjk2s 2025-10-16 16:01:19+00:00| seen|...
CVE-2025-37132
creationtimestamp| type| source ---|---|--- 2025-10-16 04:20:39+00:00| seen| Telegram/vgbZhDnekEq9zH9nqTrZ6ks6nFSzqfMwJfueKYJb6cTxFlM...
CVE-2025-43282
creationtimestamp| type| source ---|---|--- 2025-10-15 20:16:31+00:00| seen| Telegram/yGAaaWA89cqeaUdRTH0JM4DlcYPyUoZboUvh6uVFp31WdU...
CVE-2025-62410
In versions before 20.0.2, it was found that --disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom. The untrusted script and the rest of the application still run in the same Isolate/process, so attackers can deploy prototype pollution payloads ...
CVE-2025-54479
When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-11712
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerabilit...
CVE-2025-11161
creationtimestamp| type| source ---|---|--- 2025-10-15 07:15:03+00:00| seen| Telegram/B8V8B9EWTSEWTFf81B0eSGFakTH-soinuzaX-HXAgLJntQ...
WordPress Library Management System plugin <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Settings Manipulation vulnerability
Missing Authorization to Authenticated Subscriber+ Settings Manipulation vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Library Management System versions = 3.1...