CVE tracker
281 subscribers
3.79K links
News monitoring: @irnewsagency

Main channel: @orgsecuritygate

Site: SecurityGate.org
Download Telegram
CVE-2025-47820 - Flock Safety Gunshot Detection Devices Cleartext Code Storage Vulnerability

CVE ID : CVE-2025-47820
Published : June 27, 2025, 2:15 a.m. | 2 hours, 2 minutes ago
Description : Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.
Severity: 2.0 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-6748 - Airtel Thanks App Cleartext Storage Vulnerability

CVE ID : CVE-2025-6748
Published : June 27, 2025, 2:15 a.m. | 2 hours, 2 minutes ago
Description : A vulnerability classified as problematic has been found in Bharti Airtel Thanks App 4.105.4 on Android. Affected is an unknown function of the file /Android/data/com.myairtelapp/files/. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 2.1 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-6749 - Huija bicycleSharingServer SQL Injection Vulnerability

CVE ID : CVE-2025-6749
Published : June 27, 2025, 2:15 a.m. | 2 hours, 2 minutes ago
Description : A vulnerability classified as critical was found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this vulnerability is the function searchAdminMessageShow of the file AdminController.java. The manipulation of the argument Title leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-47821 - Flock Safety Gunshot Detection Device Hardcoded Password Vulnerability

CVE ID : CVE-2025-47821
Published : June 27, 2025, 3:15 a.m. | 1 hour, 2 minutes ago
Description : Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system.
Severity: 2.2 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-47822 - Flock Safety LPR Impropoer Access Control Vulnerability

CVE ID : CVE-2025-47822
Published : June 27, 2025, 3:15 a.m. | 1 hour, 2 minutes ago
Description : Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-47823 - Flock Safety LPR Hardcoded Password Vulnerability

CVE ID : CVE-2025-47823
Published : June 27, 2025, 3:15 a.m. | 1 hour, 2 minutes ago
Description : Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded password for a system.
Severity: 2.2 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-47824 - Flock Safety LPR Cleartext Code Storage Vulnerability

CVE ID : CVE-2025-47824
Published : June 27, 2025, 3:15 a.m. | 1 hour, 2 minutes ago
Description : Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have cleartext storage of code.
Severity: 2.0 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-6750 - HDF5 Heap-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-6750
Published : June 27, 2025, 3:15 a.m. | 1 hour, 2 minutes ago
Description : A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. Affected by this issue is the function H5O__mtime_new_encode of the file src/H5Omtime.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Severity: 3.3 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-53157 - Apache HTTP Server Cross-Site Request Forgery

CVE ID : CVE-2025-53157
Published : June 27, 2025, 4:15 a.m. | 4 hours, 1 minute ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-53158 - Apache HTTP Server Unvalidated User Input

CVE ID : CVE-2025-53158
Published : June 27, 2025, 4:15 a.m. | 4 hours, 1 minute ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-53159 - Apache HTTP Server Cross-Site Request Forgery

CVE ID : CVE-2025-53159
Published : June 27, 2025, 4:15 a.m. | 4 hours, 1 minute ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-53160 - Apache Apache HTTP Server SQL Injection

CVE ID : CVE-2025-53160
Published : June 27, 2025, 4:15 a.m. | 4 hours, 1 minute ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-53161 - VMware Network Policy Vulnerability: Denial of Service

CVE ID : CVE-2025-53161
Published : June 27, 2025, 4:15 a.m. | 4 hours, 1 minute ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-53162 - Apache HTTP Server Denial of Service

CVE ID : CVE-2025-53162
Published : June 27, 2025, 4:15 a.m. | 4 hours, 1 minute ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-53163 - Apache HTTP Server Arbitrary File Download

CVE ID : CVE-2025-53163
Published : June 27, 2025, 4:15 a.m. | 4 hours, 1 minute ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-53164 - Apache HTTP Server Command Injection

CVE ID : CVE-2025-53164
Published : June 27, 2025, 4:15 a.m. | 4 hours, 1 minute ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-53165 - Apache HTTP Server Cross-Site Request Forgery

CVE ID : CVE-2025-53165
Published : June 27, 2025, 4:15 a.m. | 4 hours, 1 minute ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-53166 - Apache HTTP Server Cross-Site Scripting

CVE ID : CVE-2025-53166
Published : June 27, 2025, 4:15 a.m. | 4 hours, 1 minute ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-6751 - Linksys E8450 HTTP POST Request Handler Buffer Overflow

CVE ID : CVE-2025-6751
Published : June 27, 2025, 4:15 a.m. | 4 hours, 1 minute ago
Description : A vulnerability, which was classified as critical, was found in Linksys E8450 up to 1.2.00.360516. This affects the function set_device_language of the file portal.cgi of the component HTTP POST Request Handler. The manipulation of the argument dut_language leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-6752 - Linksys UPnP Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-6752
Published : June 27, 2025, 4:16 a.m. | 4 hours, 1 minute ago
Description : A vulnerability has been found in Linksys WRT1900ACS, EA7200, EA7450 and EA7500 up to 20250619 and classified as critical. This vulnerability affects the function SetDefaultConnectionService of the file /upnp/control/Layer3Forwarding of the component IGD. The manipulation of the argument NewDefaultConnectionService leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-45737 - NetEase NeacSafe64 Elevation of Privilege

CVE ID : CVE-2025-45737
Published : June 27, 2025, 5:15 a.m. | 3 hours, 2 minutes ago
Description : An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...