Exploit for CVE-2024-8232

CVE-2024-8232 – SpiderControl SCADA Web Server File Upload Vul...

CVE-2025-22874

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon...

Security advisory: Recently discovered issue in ICNS image format handling impacts Qt

When loading a specifically crafted ICNS format image file then it will trigger a crash. This has been assigned the CVE id CVE-2025-5683. Affected versions: All versions of Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through 6.8.4, 6.9.0. This is fixed in 6.5.10, 6.8.5 and 6.9.1. Impact: If...

CVE-2025-23192

creationtimestamp| type| source ---|---|--- 2025-06-10 01:33:54+00:00| published-proof-of-concept| Telegram/UVPTEGvNWegLT6R4iAM8IA5DDdZ7pzDRTagvDaZDKFK5Xkw 2025-06-10 03:12:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7wc4iz7g2a...

Fedora: Security Advisory (FEDORA-2025-42a13f896e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-49277

creationtimestamp| type| source ---|---|--- 2025-06-09 19:05:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr733qf3wk2e...

Advisory ROSA-SA-2025-2889

Software: krb5 1.18.2 OS: ROSA Virtualization 3.0 packageevrstring: krb5-1.18.2-32.0.1.rv30 CVE-ID: CVE-2025-3576 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the MIT Kerberos implementation allows an attacker to spoof messages protected by GSSAPI using RC4-HMAC-MD5 due to...

Debian dla-4212 : libapache2-mod-security2 - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4212 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4212-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-4211 : roundcube - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4211 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4211-1 [email protected] https://www.debian.org/lts/security/...

Security advisory: Recently discovered issue in qDecodeDataUrl() in QtCore impacts Qt

An issue was found in the private API function qDecodeDataUrl in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. This has been assigned the CVE id CVE-2025-5455. Affected versions: All version of Qt up to and including 5.15.18, from 6.0.0 through 6.5.8,...

[SECURITY] [DSA 5936-1] libfile-find-rule-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5936-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2025 https://www.debian.org/security/faq -...

WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by haudayroi in WordPress Plugin Pay with Contact Form 7 versions = 1.0.4...

CVE-2025-20989

creationtimestamp| type| source ---|---|--- 2025-06-04 05:41:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqr3sl2tvsb2 2025-06-04 06:37:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqr6yaz3vb2a 2026-08-26...

PT-2025-24069 · Undefined · Undefined

CVE-2025-49203 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-49203 Published : June 4, 2025, 3:15 a.m. | 19 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2025-43923

creationtimestamp| type| source ---|---|--- 2025-06-03 15:49:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpndnj7psp2...

CVE-2025-45542

creationtimestamp| type| source ---|---|--- 2025-06-02 17:01:55+00:00| published-proof-of-concept| Telegram/evyU1N0NEzlqWkLQZaMrYM3OKb94J6CqLDhasOVakxq7P0 2025-06-03 14:33:06+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114619920256351189 2025-06-03 14:36:15+00:00| seen|...

CVE-2025-0073 Mali GPU Kernel Driver allows improper GPU memory processing operations

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver...

CVE-2025-5432

creationtimestamp| type| source ---|---|--- 2025-06-02 06:31:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5oehiiae2...

Debian dla-4197 : python3-flask-cors - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4197 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4197-1 [email protected]...

CVE-2025-41235

CVE-2025-41235 concerns Spring Cloud Gateway Server and is linked to an HTTP header handling flaw: it forwards X-Forwarded-For and Forwarded headers from untrusted proxies, enabling potential HTTP request/response smuggling (CWE-444). The vulnerability is associated with the gateway’s header proc...