CVE-2025-25245

SAP BusinessObjects Business Intelligence Platform Web Intelligence contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a...

CVE-2025-29997

CVE-2025-29997 affects the CAP back office application. The root cause is improper authorization checks on certain API endpoints, allowing an authenticated remote attacker to manipulate API request URLs and gain unauthorized access to other user accounts. The vulnerability is rated HIGH (CVSS 4.0...

CVE-2025-25242

CVE-2025-25242 affects SAP NetWeaver Application Server ABAP. The vulnerability involves cross-site scripting (XSS) through execution of malicious scripts in the ABAP application, with no impact on availability and only minor impact on confidentiality and integrity as described. Affects the SAP N...

CVE-2025-24387 Missing CSRF protection

A vulnerability in OTRS Application Server allows session hijacking due to missing attributes for sensitive cookie settings in HTTPS sessions. A request to an OTRS endpoint from a possible malicious web site, would send the authentication cookie, performing an unwanted read operation. This issue...

CVE-2025-2123

creationtimestamp| type| source ---|---|--- 2025-03-09 15:37:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6967 2025-03-09 17:57:00+00:00| seen| https://t.me/cvedetector/19926 2025-03-09 19:05:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljxq6qdad...

Webinar: Learn How ASPM Transforms Application Security from Reactive to Proactive

Are you tired of dealing with outdated security tools that never seem to give you the full picture? You're not alone. Many organizations struggle with piecing together scattered information, leaving your apps vulnerable to modern threats. That's why we're excited to introduce a smarter, unified...

CVE-2025-2063

creationtimestamp| type| source ---|---|--- 2025-03-07 04:34:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6796 2025-03-07 06:02:24+00:00| published-proof-of-concept| Telegram/5yp7nL0030ls3Gne3VU8N-XFXoAZlf1wMfRIbXn0P0E5M 2025-03-07 06:34:22+00:00| seen|...

CVE-2025-27643

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006...

CVE-2025-27637

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Cross-Site Scripting V-2024-016...

CVE-2025-27671

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Device Impersonation OVE-20230524-0015...

CVE-2025-27656

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Password Stored in Process List V-2023-011...

CVE-2025-27685

Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001...

Linux Distros Unpatched Vulnerability : CVE-2023-49347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a...

HEXAGreen CMS SQL Injection

HEXAGreen CMS suffers from a remote SQL injection vulnerability. This software does not offer any version associated with it. Title: HEXAGreen CMS - Authenticated SQLi Description: HEXAGreen CMS authenticated error-based sql injection Source URL: http://ezcode.pt/tests/hexagreen/admin/ Source...

CVE-2025-27684

Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003...

CVE-2025-27650

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Private Keys in Docker Overlay V-2023-013...

CVE-2025-27652

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: rfIDEAS V-2023-015...

CVE-2025-27670

CVE-2025-27670 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 and Application 20.0.1923. Root cause: insufficient signature validation (OVE-20230524-0014). CVSS 3.1: Network, Low attack complexity, Privileges None, User Interaction None, with Confidentiality/I...

CVE-2025-27111

creationtimestamp| type| source ---|---|--- 2025-03-04 15:31:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6370 2025-03-04 18:21:13+00:00| seen| https://t.me/cvedetector/19514 2025-04-25 17:17:07+00:00| seen| https://bsky.app/profile/aakl.bsky.social/post/3lnnq2hje5s2y 2025-04-26...

Linux Distros Unpatched Vulnerability : CVE-2014-3188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers...