CVE-2025-48016 Improper Control of Interaction Frequency

OpenFlow discovery protocol can exhaust resources because it is not rate limited...

CVE-2025-48015 Observable Response Discrepancy

Failed login response could be different depending on whether the username was local or central...

CVE-2025-41225

creationtimestamp| type| source ---|---|--- 2025-05-20 14:48:22+00:00| seen| https://bsky.app/profile/andersonc0d3.bsky.social/post/3lpmdfkawoc2w 2025-05-20 14:48:25+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/114540708203094327 2025-05-20 14:54:00+00:00| seen|...

CVE-2025-47941 TYPO3 Has Broken Authentication in Backend MFA

TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS, the multifactor authentication MFA dialog presented during backend login can be bypassed due to insufficient enforcement of access...

CVE-2025-40635

creationtimestamp| type| source ---|---|--- 2025-05-20 13:40:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16977 2025-05-20 15:06:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpme74kp4vy2...

CVE-2025-37892

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

CVE-2025-37892

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

CVE-2025-37892

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

CVE-2025-37892 mtd: inftlcore: Add error check for inftl_read_oob()

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

CVE-2025-40634

The CVE-2025-40634 case describes a stack-based buffer overflow in the TP-Link Archer AX50 router’s conn-indicator binary (running as root) prior to firmware 1.0.15 build 241203 rel61480. The root cause is a vulnerable DNS response handling path: processing DNS answers writes into a 256-byte dest...

CVE-2025-47646

creationtimestamp| type| source ---|---|--- 2025-05-20 10:11:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/37480 2025-05-20 10:28:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/37485 2025-05-23 15:44:34+00:00| seen|...

CVE-2025-4951

Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field. Despite the application preventing the inclusion of special characters within the "ScanName" field, this could be bypassed by modifying the configuration...

CVE-2025-4322

creationtimestamp| type| source ---|---|--- 2025-05-20 06:39:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16954 2025-05-20 07:18:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lplkbh22a52k 2025-05-20 23:56:44+00:00| seen|...

CVE-2025-4971

creationtimestamp| type| source ---|---|--- 2025-05-20 00:10:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpksdajg5yb2 2025-05-20 03:13:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpl4kxobuu2h 2025-05-30...

CVE-2025-44888

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the stpconfname parameter in the webstpglobalSettingpost function...

CVE-2025-44890

Summary: CVE-2025-44890 affects Planet FW-WGS-804HPT (v1.305b241111). The vulnerability is a buffer/stack overflow enabling via the host_ip input in the web_snmp_notifyv3_add_post function, caused by insufficient input length validation. Impact described across sources includes arbitrary code exe...

CVE-2025-44880

A command injection vulnerability in the component /cgi-bin/adm.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input...

CVE-2025-3078

A passback vulnerability which relates to production printers and office multifunction printers...

CVE-2025-3223

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GE Vernova WorkstationST on Windows EGD Configuration Server modules allows Path Traversal.This issue affects WorkstationST: WorkstationST V07.10.10C and earlier...

CVE-2025-39355

creationtimestamp| type| source ---|---|--- 2025-05-19 20:39:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16944 2025-05-19 20:48:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpkgzycd3t24...