6797 matches found
Linux Distros Unpatched Vulnerability : CVE-2015-1609
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 string in a BSON request. CVE-2015-1609 No...
📄 Easy Hosting Control Panel 20.04.1.b SQL Injection
Easy Hosting Control Panel version 20.04.1.b suffers from a remote SQL injection vulnerability in the listdomains function via the arananalan POST parameter. Title: Easy Hosting Control Panel EHCP 20.04.1.b - SQL Injection in the listdomains function via the arananalan POST parameter Description:...
CVE-2025-43201
This issue was addressed with improved checks. This issue is fixed in Apple Music Classical 2.3 for Android. An app may be able to unexpectedly leak a user's credentials...
CVE-2025-7961
Improper Control of Generation of Code 'Code Injection' vulnerability in Wulkano KAP on MacOS allows TCC Bypass.This issue affects KAP: 3.6.0...
WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by mcdruid in WordPress Plugin Simple Login Log versions = 1.1.3...
WordPress AWStats Script plugin <= 0.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nabil Irawan Patchstack Alliance in WordPress Plugin AWStats Script versions = 0.3...
CVE-2025-8970
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/operations/booking.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-49271
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in GravityWP GravityWP - Merge Tags gravitywp-merge-tags allows PHP Local File Inclusion.This issue affects GravityWP - Merge Tags: from n/a through = 1.4.4...
CVE-2025-38529 comedi: aio_iiro_16: Fix bit shift out of bounds
In the Linux kernel, the following vulnerability has been resolved: comedi: aioiiro16: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: if 1 options1 & 0xdcfc However, it-optionsi is an unchecked int value from userspace, so the shift amount could ...
CVE-2025-54791
creationtimestamp| type| source ---|---|--- 2025-08-16 06:40:08+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lwir5k52342l...
WordPress Advanced iFrame plugin <= 2025.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Advanced iFrame versions = 2025.6...
CVE-2025-43201
creationtimestamp| type| source ---|---|--- 2025-08-16 00:37:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwi4uvuwos2e...
CVE-2024-36004
creationtimestamp| type| source ---|---|--- 2025-08-15 22:40:07+00:00| seen| https://gist.github.com/FlorianHeigl/6c2f7d02ae85c93f64d38176c57f805f 2026-02-27 08:45:57+00:00| seen| https://gist.github.com/morecitricacid-coder/ec64f9313e2ced9b564171986dff5be5...
CVE-2025-43490
creationtimestamp| type| source ---|---|--- 2025-08-15 20:52:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwhqbvmf252t...
CVE-2025-2181
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...
CVE-2025-54475 Extension - joomsky.com - SQL injection in JS jobs component version 1.3.2 - 1.4.4 for Joomla
A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execute arbitrary SQL commands...
CVE-2025-01326
creationtimestamp| type| source ---|---|--- 2025-08-15 11:40:07+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwgrgxr3lk2q...
CVE-2025-7650
creationtimestamp| type| source ---|---|--- 2025-08-15 09:06:05+00:00| seen| Telegram/ZQL8Bl636NMNbAteEByLExtFfMN1gpdg02pWFBoapUljzag...