CVE-2025-37818

creationtimestamp| type| source ---|---|--- 2025-05-08 07:23:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15491 2025-05-08 08:31:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loniqqtvxp2h 2025-05-08 11:45:01+00:00| seen|...

CVE-2025-37819

creationtimestamp| type| source ---|---|--- 2025-05-08 07:23:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15490 2025-05-08 08:31:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loniqqxfmz2r 2025-05-08 11:45:06+00:00| published-proof-of-concept|...

A Bootiful Podcast: V Körbes on security from the platform on up

Hi, Spring fans! In today's extra special installment I talk to Broadcom's V Körbes who works on security above and below the application...

CVE-2025-47667

creationtimestamp| type| source ---|---|--- 2025-05-07 18:22:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15364 2025-05-07 18:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lolzkeeo3222 2025-05-07 19:00:54+00:00| seen| https://t.me/cvedetector/24729...

CVE-2025-47635 WordPress WebinarPress plugin <= 1.33.28 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Server Side Request Forgery.This issue affects WebinarPress: from n/a through = 1.33.28...

CVE-2025-3766

creationtimestamp| type| source ---|---|--- 2025-05-07 05:21:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15269 2025-05-07 08:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokxyklrhm2w 2025-05-07 08:53:11+00:00| seen|...

Radware Cloud Web Application Firewall Vulnerable to Filter Bypass

Overview The Radware Cloud Web Application Firewall is vulnerable to filter bypass by multiple means. The first is via specially crafted HTTP request and the second being insufficient validation of user-supplied input when processing a special character. An attacker with knowledge of these...

Redefining Application Security: Imperva’s Vision for the Future

It’s no secret that web applications have undergone a significant transformation over the past few years. The widespread adoption of containerization, serverless computing, low-code development, APIs, and microservices has redefined how applications are built, deployed, and scaled. According to...

CVE-2024-58135

Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...

CVE-2024-58135

Mojolicious (Perl) vulnerability CVE-2024-58135: default app skeleton generation using mojo generate app writes a weak HMAC session secret via the insecure rand() function, enabling potential brute-forcing of session keys. Affected: Mojolicious versions from 7.28 for Perl (and related 0.999922–9....

CVE-2025-3858

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14428 2025-05-02 07:34:35+00:00| seen| https://t.me/cvedetector/24311 2025-05-02 08:00:41+00:00| seen|...

CVE-2025-40619

Bookgy does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authentication, to reach private areas and/or areas intended for other roles...

New Research Reveals: 95% of AppSec Fixes Don't Reduce Risk

For over a decade, application security teams have faced a brutal irony: the more advanced the detection tools became, the less useful their results proved to be. As alerts from static analysis tools, scanners, and CVE databases surged, the promise of better security grew more distant. In its...

CVE-2025-4143 Missing validation of redirect_uri on authorize endpoint

The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp , did not correctly validate that redirecturi was on the allowed list of redirect URIs for the given client registration. Fixed in: ...

CVE-2025-32888

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token used for sending SMS through a goTenna server is hardcoded in the app...

CVE-2025-4111

creationtimestamp| type| source ---|---|--- 2025-04-30 11:13:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14006 2025-04-30 13:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnzx4irpkv2h 2025-04-30 14:34:00+00:00| seen|...

CVE-2025-24338

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated lowprivileged attacker to execute arbitrary client-side code in the context of another user's browser via multiple crafted HTTP requests...

PT-2025-18330 · Hcl · Hcl Domino Volt

Name of the Vulnerable Software and Affected Versions: HCL Domino Volt affected versions not specified Description: The issue concerns an unsafe default file type filter policy that allows the upload of .html files and the execution of unsafe JavaScript in deployed applications. This could...

CVE-2025-3977

creationtimestamp| type| source ---|---|--- 2025-04-27 17:10:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13626 2025-04-27 19:40:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnsyy6fpd72h 2025-04-27 21:20:13+00:00| seen|...

CVE-2025-46510

Cross-Site Request Forgery CSRF vulnerability in harrysudana Contact Form 7 Calendar cf7-calendar allows Stored XSS.This issue affects Contact Form 7 Calendar: from n/a through = 3.0.1...