10964 matches found
CVE-2025-44872
creationtimestamp| type| source ---|---|--- 2025-05-02 15:17:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14501 2025-05-02 15:59:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo73xkzqzvk2 2025-05-02...
CVE-2025-0427
creationtimestamp| type| source ---|---|--- 2025-05-02 10:16:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14466 2025-05-02 12:00:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6rn64jr72l 2025-05-02 13:26:06+00:00| seen| https://t.me/cvedetector/24340 2025-05-02...
CVE-2025-2812
creationtimestamp| type| source ---|---|--- 2025-05-02 09:18:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14465 2025-05-02 11:30:24+00:00| seen| Telegram/9NKvNB1vhiQ9HCsh6KHjnVHDcPQMbEoQC5oa2MSssSFvCg4 2025-05-02 12:00:43+00:00| seen|...
CVE-2024-11142
creationtimestamp| type| source ---|---|--- 2025-05-02 08:16:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14464 2025-05-02 11:45:44+00:00| seen| https://t.me/cvedetector/24336 2025-05-02 12:00:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6rn5izn62p 2025-05-02...
BIT-MOODLE-2024-34005 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include...
BIT-MOODLE-2024-28593
The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's UsingChat page says "If you know some HTML code, you can use it in your text to do things like insert image...
MAL-2025-3562 Malicious code in minicom-support-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fe5a32eef884912d0aef63ac3eaee111adfe5f86d5aa4b762a728f9d6f8c7e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache
TL;DR How RDP Bitmap Cache can reveal user activity No RDP logs? How can we reconstruct RDP activity? How cached tiles can uncover insider threats Introduction A lot of people are aware of RDP and what its functions are. It’s known for providing remote access and making life easier for...
ASB-A-322159724
In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
Development of an Adapter for Analyzing and Protecting Machine Learning Models from Competitive Activity in the Networks Services
Due to the increasing number of tasks that are solved on remote servers, identifying and classifying traffic is an important task to reduce the load on the server. There are various methods for classifying traffic. This paper discusses machine learning models for solving this problem. However, su...
ASB-A-232799171
In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...
MAL-2025-3380 Malicious code in besec (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f4637511caaa8fbdf877671d4abfc117aa6ef86436b35652d7d1a842ac558a6 The OpenSSF Package Analysis project identified 'besec' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...
Malicious code in freo-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8745e789b7b101fb7ede2f6f26567a39b6ec9522c2f6cad7f182098661442ced The OpenSSF Package Analysis project identified 'freo-design-system' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...
CVE-2024-56156
creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq76r3yt24 2025-04-25 19:11:04+00:00| seen| https://t.me/cvedetector/23761 2025-04-25 21:36:02+00:00| seen|...
CVE-2025-31006
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arete-it Activity Reactions For Buddypress activity-reactions-for-buddypress allows Reflected XSS.This issue affects Activity Reactions For Buddypress: from n/a through = 1.0.22...
CVE-2025-2238
creationtimestamp| type| source ---|---|--- 2025-04-25 07:07:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13386 2025-04-25 07:07:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxvjn6m52 2025-04-25 08:20:18+00:00| seen|...
CVE-2025-3775
creationtimestamp| type| source ---|---|--- 2025-04-25 05:08:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13378 2025-04-25 05:42:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmiyzlvwvb2 2025-04-25 09:09:17+00:00| seen|...
CVE-2025-46547
creationtimestamp| type| source ---|---|--- 2025-04-25 03:06:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13371 2025-04-25 04:04:40+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmdowftehn2 2025-04-25...
Mattermost Improper Access Control Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Improper Access Control vulnerability that stems from improper access control and can be exploited by an attacker to retrieve user activity logs...