CVE-2025-48027

The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver...

CVE-2025-48051

powertip.ts in Lila for Lichess before ab0beaf allows XSS in some applications because of an innerHTML usage pattern in which text is extracted from a DOM node and interpreted as HTML...

CVE-2025-48024

In BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive application secrets via the /api/v1/settings endpoint...

CVE-2025-46836

net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...

CVE-2025-29686

creationtimestamp| type| source ---|---|--- 2025-05-14 22:32:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16432 2025-05-14 22:57:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63whsqhm2t...

CVE-2025-24155

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to disclose kernel memory...

CVE-2025-31224

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to bypass certain Privacy preferences...

CVE-2025-31219

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. An attacker may be able to cause unexpected system termination or corrupt...

CVE-2025-31256

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.5. Hot corner may unexpectedly reveal a user’s deleted notes...

CVE-2025-31210

The issue was addressed with improved UI. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing web content may lead to a denial-of-service...

CVE-2025-26783

creationtimestamp| type| source ---|---|--- 2025-05-14 21:32:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16424 2025-05-14 22:57:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63wiqzud2n...

CVE-2025-44024

creationtimestamp| type| source ---|---|--- 2025-05-14 21:32:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16422 2025-05-14 22:57:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63wh32262h...

CVE-2025-29688

creationtimestamp| type| source ---|---|--- 2025-05-14 21:32:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16413 2025-05-14 22:57:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63widkog2p...

CVE-2025-3659

Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: Digi PortServer TS - prior to and including 82000747AA, build date 06/17/2022 Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774Z, build date 10/19/2020...

CVE-2025-4641

creationtimestamp| type| source ---|---|--- 2025-05-14 18:32:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16365 2025-05-16 06:47:52+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lpbgonpzzs23 2025-05-19 16:22:12+00:00| seen|...

CVE-2025-30666

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-4664

Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2025-0133

PAN-OS CVE-2025-0133 describes a reflected XSS in the GlobalProtect gateway and portal, exploitable by an authenticated Captive Portal user via a specially crafted link to execute malicious JavaScript in the user’s browser. The primary risk is phishing/credential theft, with limited confidentiali...

CVE-2025-4640

CVE-2025-4640 affects the PointCloudLibrary (PCL) “pcl” component. The issue is an out-of-bounds write that may cause buffer overflow when PCL is used with system zlib and the PCL version is older than 1.14.0. The vulnerability appears if the PCL version is

CVE-2025-4640 Out-of-bounds Write in pcl

Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITHSYSTEMZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or...