CVE-2025-5212

creationtimestamp| type| source ---|---|--- 2025-05-26 23:42:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4dwyoiprm2 2025-05-26 23:47:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17586 2025-05-27...

CVE-2025-4783

creationtimestamp| type| source ---|---|--- 2025-05-26 23:41:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4dwuvzd352 2025-05-26 23:47:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17585...

CVE-2025-5208

creationtimestamp| type| source ---|---|--- 2025-05-26 22:48:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17581 2025-05-26 23:42:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4dxdhyjnj2 2025-05-27...

CVE-2025-5204

creationtimestamp| type| source ---|---|--- 2025-05-26 20:48:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17576 2025-05-26 21:47:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq45l4wp4352 2025-05-26...

CVE-2025-5202

The CVE-2025-5202 issue affects the Open Asset Import Library (assimp) 5.4.3. The vulnerability is in HL1MDLLoader::validate_header within assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp, where manipulation leads to an out-of-bounds read. Exploitation requires local access. Public exploitation...

CVE-2025-5200

creationtimestamp| type| source ---|---|--- 2025-05-26 18:48:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17573 2025-05-26 19:04:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3uimjcwap2 2025-05-26...

CVE-2025-37992

No description is available for this CVE...

CVE-2025-40665

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17564 2025-05-26 14:13:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3eb24njm2a...

CVE-2025-5186

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17557 2025-05-26 15:23:18+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3i3qj2i6x2...

CVE-2025-40667

CVE-2025-40667 describes a missing authorization vulnerability in TCMAN’s GIM v11. An authenticated attacker can access functions not exposed via the UI by modifying the HTTP response status from ‘302 Found’ to ‘200 OK’ and tampering with hidden fields hdnReadOnly and hdnUserLogin. The CVE docume...

CVE-2025-5168

A flaw was found in the Open Asset Import Library Assimp. This vulnerability allows an out-of-bounds read via manipulation of an argument during MDL file import...

CVE-2025-5166

A flaw was found in the Open Asset Import Library Assimp MDC File Parser. This vulnerability allows out-of-bounds memory reads via manipulation of a function argument...

CVE-2025-48797

A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow. Mitigation Currently...

CVE-2025-35003 Apache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities.

Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS Bluetooth Stack HCI and UART components that may result in system crash, denial of service, or arbitrary code execution, after receiving...

CVE-2025-41654

An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog...

CVE-2025-5176

creationtimestamp| type| source ---|---|--- 2025-05-26 08:47:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17539 2025-05-26 09:51:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq2vlw53pu2s...

CVE-2025-5177 Realce Tecnologia Queue Ticket Kiosk Admin Login Page index.php cross site scripting

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been rated as problematic. This issue affects some unknown processing of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to cross site scripting. The...

CVE-2025-41655

CVE-2025-41655 concerns Pepperl+Fuchs Profinet Gateway products. Publicly documented entries indicate an unauthenticated remote attacker can access specific URLs that cause the device to reboot. Affected models include Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and LB8122A.1.EL. The underlying i...

Advisory ROSA-SA-2025-2864

software: freetype 2.10.4 OS: ROSA-CHROME packageevrstring: freetype-2.10.4-7 CVE-ID: CVE-2025-27363 BDU-ID: 2025-02719 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the FreeType font rasterization library involves reading outside buffer boundaries in memory. Exploitation of the vulnerability coul...

CVE-2025-5168

creationtimestamp| type| source ---|---|--- 2025-05-26 04:47:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17527 2025-05-26 05:36:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq2hdiq4cv2e...