2711
|
- |
|
-
|
-
|
Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validate request order and is thereby vulnerable to a MITM attack,…
|
CWE-476 CWE-305 CWE-841
NULL Pointer Dereference Authentication Bypass by Primary Weakness Improper Enforcement of Behavioral Workflow
|
CVE-2024-51738
|
2025-01-21 01:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2712
|
5.6 |
MEDIUM
Network
|
-
|
-
|
IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without pri…
|
CWE-620
Unverified Password Change
|
CVE-2024-45647
|
2025-01-21 00:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2713
|
- |
|
-
|
-
|
WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini.
|
-
|
CVE-2025-24337
|
2025-01-20 23:15 |
2025-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2714
|
- |
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
io_eventfd_do_signal() is invoked from an RCU callback, bu…
|
-
|
CVE-2025-21655
|
2025-01-20 23:15 |
2025-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2715
|
- |
|
-
|
-
|
This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmi…
|
CWE-1004 CWE-614
Sensitive Cookie Without 'HttpOnly' Flag Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
|
CVE-2025-0479
|
2025-01-20 21:15 |
2025-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2716
|
- |
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: adapt set backend to use GC transaction API
Use the GC transaction API to replace the old and buggy gc API …
|
-
|
CVE-2023-52923
|
2025-01-20 20:15 |
2025-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2717
|
7.2 |
HIGH
Network
|
-
|
-
|
The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database modification privileges and regular system privileges to perform arbitrary cod…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2025-0586
|
2025-01-20 12:15 |
2025-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2718
|
9.8 |
CRITICAL
Network
-
|
-
|
The a+HRD from aEnrich Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
|
CWE-89
SQL Injection
|
CVE-2025-0585
|
2025-01-20 12:15 |
2025-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
2719
|
5.3 |
MEDIUM
Network
-
|
-
|
The a+HRD from aEnrich Technology has a Server-side Request Forgery, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2025-0584
|
2025-01-20 12:15 |
2025-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
2720
|
4.7 |
MEDIUM
Network
|
-
|
-
|
A vulnerability classified as critical was found in itsourcecode Farm Management System up to 1.0. This vulnerability affects unknown code of the file /add-pig.php. The manipulation of the argument p…
|
CWE-284 CWE-434
Improper Access Control Unrestricted Upload of File with Dangerous Type
|
CVE-2025-0582
|
2025-01-20 12:15 |
2025-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|