Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.8 HIGH
CVE-2025-7347 — IDOR in Dinibh Puzzle's Dinibh Patrol Tracking System

Authorization Bypass Through User-Controlled Key vulnerability in Dinibh Puzzle Software Solutions Dinibh Patrol Tracking System allows Exploitation of Trusted Identifiers.This issue affects Dinibh P…

Remote | Authorization
Feb 10, 2026 Feb 10, 2026
Feb 10, 2026
Feb 10, 2026
5.5 MEDIUM
CVE-2025-15571 — ckolivas lrzip stream.c ucompthread null pointer dereference

A security vulnerability has been detected in ckolivas lrzip up to 0.651. This vulnerability affects the function ucompthread of the file stream.c. Such manipulation leads to null pointer dereference…

lrzip | Denial of Service
Feb 10, 2026 Feb 27, 2026
Feb 10, 2026
Feb 27, 2026
8.7 HIGH
CVE-2025-6967 — Authentication Bypass in Sarman Soft's CMS

Execution After Redirect (EAR) vulnerability in Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. CMS allows JSON Hijacking (aka JavaScript Hijacking), Authentication Bypass.Th…

Remote | Authentication
Feb 10, 2026 Feb 10, 2026
Feb 10, 2026
Feb 10, 2026
7.8 HIGH
CVE-2025-15570 — ckolivas lrzip stream.c lzma_decompress_buf use after free

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is …

lrzip | Memory Corruption
Feb 10, 2026 Feb 27, 2026
Feb 10, 2026
Feb 27, 2026
Showing 20 of 5504 Results