CVE-2025-32017

Umbraco is a free and open source .NET content management system. Authenticated users to the Umbraco backoffice are able to craft management API request that exploit a path traversal vulnerability to upload files into a incorrect location. The issue affects Umbraco 14+ and is patched in 14.3.4 an...

CVE-2025-32017 Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users

Umbraco is a free and open source .NET content management system. Authenticated users to the Umbraco backoffice are able to craft management API request that exploit a path traversal vulnerability to upload files into a incorrect location. The issue affects Umbraco 14+ and is patched in 14.3.4 an...

CVE-2025-31582

creationtimestamp| type| source ---|---|--- 2025-04-03 14:35:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10220...

Amazon Linux 2 : freetype (ALAS-2025-2806)

The version of freetype installed on the remote host is prior to 2.8-14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2806 advisory. FreeType 2.8.1 has a signed integer overflow in cf2doFlex in cff/cf2intrp.c. CVE-2025-23022 An out of bounds write exists ...

CVE-2025-30925

creationtimestamp| type| source ---|---|--- 2025-03-27 11:26:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9039 2025-03-27 14:58:34+00:00| seen| https://t.me/cvedetector/21283...

Next.js 14.x < 14.2.25 Authorization Bypass

The version of Next.js installed on the remote host is 11.1.4 prior to 12.3.5, 13.0.x prior to 13.5.9, 14.x prior to 14.2.25 or 15.x prior to 15.2.3. It is, therefore, affected by Authorization Bypass if the authorization check occurs in middleware. Note that the scanner has not attempted to...

CVE-2024-37289

creationtimestamp| type| source ---|---|--- 2025-03-14 19:44:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7629...

CVE-2024-31956

creationtimestamp| type| source ---|---|--- 2025-03-14 16:44:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7599...

CVE-2024-27883

creationtimestamp| type| source ---|---|--- 2025-03-14 16:44:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7589...

CVE-2024-44184

creationtimestamp| type| source ---|---|--- 2025-03-14 16:44:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7588...

GHSA-HH26-4PPW-5864

creationtimestamp| type| source ---|---|--- 2025-03-14 14:45:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7559...

CVE-2023-0372

creationtimestamp| type| source ---|---|--- 2025-03-14 14:45:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7555...

CVE-2025-2166

creationtimestamp| type| source ---|---|--- 2025-03-14 04:53:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7525 2025-03-14 08:20:51+00:00| seen| https://t.me/cvedetector/20271...

openSUSE Security Advisory (SUSE-SU-2025:0847-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-1559

creationtimestamp| type| source ---|---|--- 2025-03-13 04:44:57+00:00| seen| https://t.me/cvedetector/20180 2025-03-14 14:45:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7562...

CVE-2025-1296

creationtimestamp| type| source ---|---|--- 2025-03-10 20:43:05+00:00| seen| https://t.me/cvedetector/19975 2025-03-11 20:41:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7233 2025-08-16 01:45:14+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19 04:06:32+00:00| seen|...

CVE-2025-22603

creationtimestamp| type| source ---|---|--- 2025-03-10 19:38:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7029 2025-08-16 01:45:14+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19 04:06:32+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0...

CVE-2024-38638

creationtimestamp| type| source ---|---|--- 2025-03-07 20:48:14+00:00| seen| https://t.me/cvedetector/19856 2025-08-16 01:45:14+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19 04:06:35+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0...

CVE-2024-53694

creationtimestamp| type| source ---|---|--- 2025-03-07 16:35:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6858 2025-03-07 20:47:53+00:00| seen| https://t.me/cvedetector/19841 2025-08-16 01:45:14+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19 04:06:35+00:00| seen|...

CVE-2024-53698

creationtimestamp| type| source ---|---|--- 2025-03-07 16:35:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6854 2025-03-07 20:47:59+00:00| seen| https://t.me/cvedetector/19845 2025-08-16 01:45:14+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19 04:06:35+00:00| seen|...