5289 matches found
CVE-2025-47274
CVE-2025-47274 affects ToolHive, a utility for deploying/managing MCP servers. The issue arises from the startup code ordering that causes sensitive data to be written into run configuration files used to restart stopped MCP containers. An attacker with access to the user’s home directory can rea...
Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
/\ / | / \ | \ | || | | | | / | /| |/ |/ |/ ,/; ; ; ,'/|; ,/,/, ,'/ |;/,/,/,/| ,/; |;|/,/,/,/,/| ,/'; |;|,/,/,/,/,/| ,/'; |;|/,/,/,/,/,/|, / ; |;|,/,/,/,/,/,/| / ,'; |;|/,/,/,/,/,/,/| /,/'; |;|,/,/,/,/,/,/,/| /;/ '; |;|/,/,/,/,/,/,/,/| ██████╗ ███████╗ ██████╗ █████╗ ███████╗██╗ ██╗███████╗...
Security Steerability Is All You Need
The adoption of Generative AI GenAI in various applications inevitably comes with expanding the attack surface, combining new security threats along with the traditional ones. Consequently, numerous research and industrial initiatives aim to mitigate these security threats in GenAI by developing...
PT-2025-20551
Name of the Vulnerable Software and Affected Versions Kong Insomnia Desktop Application versions prior to 11.0.2 Description The Kong Insomnia Desktop Application is susceptible to a template injection issue. This flaw stems from inadequate validation of user-provided input during template string...
CVE-2025-37818
creationtimestamp| type| source ---|---|--- 2025-05-08 07:23:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15491 2025-05-08 08:31:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loniqqtvxp2h 2025-05-08 11:45:01+00:00| seen|...
CVE-2025-37819
creationtimestamp| type| source ---|---|--- 2025-05-08 07:23:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15490 2025-05-08 08:31:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loniqqxfmz2r 2025-05-08 11:45:06+00:00| published-proof-of-concept|...
A Bootiful Podcast: V Körbes on security from the platform on up
Hi, Spring fans! In today's extra special installment I talk to Broadcom's V Körbes who works on security above and below the application...
CVE-2025-47667
creationtimestamp| type| source ---|---|--- 2025-05-07 18:22:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15364 2025-05-07 18:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lolzkeeo3222 2025-05-07 19:00:54+00:00| seen| https://t.me/cvedetector/24729...
CVE-2025-47635 WordPress WebinarPress plugin <= 1.33.28 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Server Side Request Forgery.This issue affects WebinarPress: from n/a through = 1.33.28...
CVE-2025-3766
creationtimestamp| type| source ---|---|--- 2025-05-07 05:21:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15269 2025-05-07 08:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokxyklrhm2w 2025-05-07 08:53:11+00:00| seen|...
Radware Cloud Web Application Firewall Vulnerable to Filter Bypass
Overview The Radware Cloud Web Application Firewall is vulnerable to filter bypass by multiple means. The first is via specially crafted HTTP request and the second being insufficient validation of user-supplied input when processing a special character. An attacker with knowledge of these...
Redefining Application Security: Imperva’s Vision for the Future
It’s no secret that web applications have undergone a significant transformation over the past few years. The widespread adoption of containerization, serverless computing, low-code development, APIs, and microservices has redefined how applications are built, deployed, and scaled. According to...
CVE-2024-58135
Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...
CVE-2024-58135
Mojolicious (Perl) vulnerability CVE-2024-58135: default app skeleton generation using mojo generate app writes a weak HMAC session secret via the insecure rand() function, enabling potential brute-forcing of session keys. Affected: Mojolicious versions from 7.28 for Perl (and related 0.999922–9....
CVE-2025-3858
creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14428 2025-05-02 07:34:35+00:00| seen| https://t.me/cvedetector/24311 2025-05-02 08:00:41+00:00| seen|...
CVE-2025-40619
Bookgy does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authentication, to reach private areas and/or areas intended for other roles...
New Research Reveals: 95% of AppSec Fixes Don't Reduce Risk
For over a decade, application security teams have faced a brutal irony: the more advanced the detection tools became, the less useful their results proved to be. As alerts from static analysis tools, scanners, and CVE databases surged, the promise of better security grew more distant. In its...
CVE-2025-4143 Missing validation of redirect_uri on authorize endpoint
The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp , did not correctly validate that redirecturi was on the allowed list of redirect URIs for the given client registration. Fixed in: ...
CVE-2025-32888
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token used for sending SMS through a goTenna server is hardcoded in the app...
CVE-2025-4111
creationtimestamp| type| source ---|---|--- 2025-04-30 11:13:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14006 2025-04-30 13:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnzx4irpkv2h 2025-04-30 14:34:00+00:00| seen|...