CVE-2025-5419

Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-5068

Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-5419

CVE-2025-5419: Out-of-bounds read/write in V8 (Chromium) used by Google Chrome/Chromium-based browsers. A remote attacker could potentially exploit heap corruption via a crafted HTML page. Affected: Google Chrome/Chromium’s V8 until version 137.0.7151.68. Impact described as High (C:E/I/H/A: High...

CVE-2025-45387

creationtimestamp| type| source ---|---|--- 2025-06-02 20:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqnmz5vhmu2r...

CVE-2025-48996

HAX open-apis provides microservice apis for HAX webcomponents repo that are shared infrastructure calls. An unauthenticated information disclosure vulnerability exists in the Penn State University deployment of the HAX content management system via the haxPsuUsage API endpoint, related to a flat...

CVE-2025-48387

creationtimestamp| type| source ---|---|--- 2025-06-02 20:00:25+00:00| published-proof-of-concept| Telegram/M9ruxIqfssiRmufIiVDPBVG9309mAKgr9KyLQBBOZAkMKU 2025-06-02 20:37:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnmxx4dtgv2...

CVE-2024-52035

A flaw was found in the catdoc OLE Document File Allocation Table Parser. This vulnerability allows heap-based memory corruption via a specially crafted malformed file. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2025-48387

tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workaround, use the ignore option to ignore n...

CVE-2025-1051 Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2025-5389

A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504. Affected by this issue is the function dogenerateOne2Many of the file /generateController.do?dogenerateOne2Many of the component File Handler. The manipulation leads to improper access controls. The attack...

CVE-2025-20298

creationtimestamp| type| source ---|---|--- 2025-06-02 17:41:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnd3uxys5d2 2025-06-02 18:00:20+00:00| seen| Telegram/toim9KAGesCTq5oqOj-obWHkIDyEkDrySjdW6f3o1ChokI 2025-06-03 12:41:15+00:0...

CVE-2025-20297

creationtimestamp| type| source ---|---|--- 2025-06-02 17:41:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnd3v5drai2 2025-06-03 16:57:27+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3lqpr565vx22s 2025-06-03...

CVE-2025-48940

creationtimestamp| type| source ---|---|--- 2025-06-02 17:01:55+00:00| published-proof-of-concept| Telegram/evyU1N0NEzlqWkLQZaMrYM3OKb94J6CqLDhasOVakxq7P0 2025-06-02 17:08:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnbbbz2jft2...

CVE-2024-7074 Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution

An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP admin services. A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location on the server. By leveraging this vulnerability, an...

CVE-2025-48995 SignXML's signature verification with HMAC is vulnerable to a timing attack

SignXML is an implementation of the W3C XML Signature standard in Python. When verifying signatures with X509 certificate validation turned off and HMAC shared secret set signxml.XMLVerifier.verifyrequirex509=False, hmackey=..., versions of SignXML prior to 4.0.4 are vulnerable to a potential...

CVE-2024-40113

creationtimestamp| type| source ---|---|--- 2025-06-02 16:00:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqn5eyrjl3s2...

CVE-2025-48866

creationtimestamp| type| source ---|---|--- 2025-06-02 15:59:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqn5ek2bvny2 2025-06-02 16:45:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114614778635202833 2025-06-02...

CVE-2025-44172

creationtimestamp| type| source ---|---|--- 2025-06-02 15:59:41+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqn5efgro7s2 2025-06-02 17:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqndilrkyo2s...

CVE-2025-48941 MyBB may disclosure unviewable threads' titles in searches

MyBB is free and open source forum software. Prior to version 1.8.39, the search component does not validate permissions correctly, which allows attackers to determine the existence of hidden draft, unapproved, or soft-deleted threads containing specified text in the title. The visibility state...

CVE-2024-54028

creationtimestamp| type| source ---|---|--- 2025-06-02 15:30:17+00:00| seen| https://infosec.place/objects/8bfd0e8e-69da-4ffa-a585-5c7e8302e236 2025-06-02 15:59:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqn5eks6lds2 2025-06-02...