CVE-2025-2238

creationtimestamp| type| source ---|---|--- 2025-04-25 07:07:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13386 2025-04-25 07:07:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxvjn6m52 2025-04-25 08:20:18+00:00| seen|...

CVE-2025-3775

creationtimestamp| type| source ---|---|--- 2025-04-25 05:08:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13378 2025-04-25 05:42:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmiyzlvwvb2 2025-04-25 09:09:17+00:00| seen|...

CVE-2025-46547

creationtimestamp| type| source ---|---|--- 2025-04-25 03:06:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13371 2025-04-25 04:04:40+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmdowftehn2 2025-04-25...

Mattermost Improper Access Control Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Improper Access Control vulnerability that stems from improper access control and can be exploited by an attacker to retrieve user activity logs...

CVE-2025-3749

creationtimestamp| type| source ---|---|--- 2025-04-24 23:09:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13365 2025-04-25 03:18:14+00:00| seen| https://t.me/cvedetector/23714...

CVE-2025-1294

creationtimestamp| type| source ---|---|--- 2025-04-24 23:09:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13364 2025-04-25 01:30:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2hdsoapq2 2025-04-25 03:18:21+00:00| seen|...

Malicious code in echo-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f49c42944e8358945b0e71cfb98fe50999b199d5f3e12802e35b84c9893c5c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30409

creationtimestamp| type| source ---|---|--- 2025-04-24 14:09:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114393333303430166 2025-04-24 14:16:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnkt4hn5ob22 2025-04-24...

ALBEDO Telecom Net.Time - PTP/NTP clock

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

SUSE CVE-2025-24866

Mattermost versions 9.11.x = 9.11.8 fail to enforce proper access controls on the /api/v4/audits endpoint, allowing users with delegated granular administration roles who lack access to Compliance Monitoring to retrieve User Activity Logs...

CVE-2025-28021

creationtimestamp| type| source ---|---|--- 2025-04-23 21:10:36+00:00| seen| https://t.me/cvedetector/23614 2025-04-24 16:07:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13278...

Malicious code in test-kaks3c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 591289fef82efe1b6a54e8948561a76e1e42addd4e1b62fe61364c894640b6b9 The OpenSSF Package Analysis project identified 'test-kaks3c' @ 10.0.4 npm as malicious. It is considered malicious because: - The package...

CVE-2025-3454

creationtimestamp| type| source ---|---|--- 2025-04-23 08:30:30+00:00| seen| https://bsky.app/profile/grafana.bsky.social/post/3lnhroytxvs2w 2025-04-23 10:38:14+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lnhytg4c222p 2025-04-26 10:03:20+00:00| seen|...

PT-2025-17706 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 16.6 through 17.9.7 GitLab EE/CE versions 17.10 through 17.10.5 GitLab EE/CE versions 17.11 through 17.11.1 Description: An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing...

Whistleblower: DOGE Siphoned NLRB Case Data

A security architect with the National Labor Relations Board NLRB alleges that employees from Elon Musk 's Department of Government Efficiency DOGE transferred gigabytes of sensitive data from agency case files in early March, using short-lived accounts configured to leave few traces of network...

CVE-2025-27086

creationtimestamp| type| source ---|---|--- 2025-04-21 18:27:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114377364182338148 2025-04-21 19:02:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12744 2025-04-21 20:59:14+00:00| seen|...

Improper Access Control

github.com/mattermost/mattermost-server is vulnerable to Improper Access Control. The vulnerability is due to insufficient enforcement of access restrictions on the /api/v4/audits endpoint, allowing users with delegated granular administration roles to access User Activity Logs without Compliance...

CVE-2025-43955

creationtimestamp| type| source ---|---|--- 2025-04-20 19:41:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnbfs7slbz42 2025-04-20 22:49:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnbqbjxoj72d 2025-04-20...

CVE-2025-3825

creationtimestamp| type| source ---|---|--- 2025-04-20 11:58:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnalvb6v6la2 2025-04-20 12:01:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12612 2025-04-20...

CVE-2025-3819

creationtimestamp| type| source ---|---|--- 2025-04-19 20:43:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln6ysjoe7k24 2025-04-19 20:59:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12598 2025-04-19 23:00:30+00:00| published-proof-of-concept|...