CVE-2025-46721

nosurf is cross-site request forgery CSRF protection middleware for Go. A vulnerability in versions prior to 1.2.0 allows an attacker who controls content on the target site, or on a subdomain of the target site either via XSS, or otherwise to bypass CSRF checks and issue requests on user's behal...

CVE-2025-47278

Flask is a web server gateway interface WSGI web application framework. In Flask 3.1.0, the way fallback key configuration was handled resulted in the last fallback key being used for signing, rather than the current signing key. Signing is provided by the itsdangerous library. A list of keys can...

CVE-2025-47278

Flask is a web server gateway interface WSGI web application framework. In Flask 3.1.0, the way fallback key configuration was handled resulted in the last fallback key being used for signing, rather than the current signing key. Signing is provided by the itsdangerous library. A list of keys can...

CVE-2025-30159

creationtimestamp| type| source ---|---|--- 2025-05-13 15:31:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16147 2025-05-13 16:31:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2vipct46k2...

CVE-2024-35281

creationtimestamp| type| source ---|---|--- 2025-05-13 15:31:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16138 2025-05-13 15:38:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2rvjquu3z2...

CVE-2025-22859

creationtimestamp| type| source ---|---|--- 2025-05-13 15:31:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2rm4mmsxr2 2025-05-13 15:31:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16140...

CVE-2025-46721

A CSRF vulnerability in nosurf (Go) before v1.2.0 arises from misusing Go’s net/http, causing all incoming requests to be treated as plain-text and bypassing the Referer-origin check. An attacker controlling content on the target or a subdomain can forge cross-origin requests and potentially mani...

CVE-2025-45866

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface...

CVE-2024-42446

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution...

CVE-2024-53326

creationtimestamp| type| source ---|---|--- 2025-05-13 13:11:10+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/linqpaddeserializationpersistence.rb 2025-05-14 21:02:17+00:00| seen|...

CVE-2025-4649 ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.

Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 befo...

CVE-2025-4649 ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.

Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 befo...

CVE-2025-32917

creationtimestamp| type| source ---|---|--- 2025-05-13 11:29:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16111 2025-05-13 11:51:38+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2g6npyfhh2 2025-05-13 14:47:46+00:00| seen|...

CVE-2025-30668

creationtimestamp| type| source ---|---|--- 2025-05-13 11:28:45+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lp2ey6gsi62t 2025-05-14 18:58:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp5okqvowg2p...

CVE-2025-30663

creationtimestamp| type| source ---|---|--- 2025-05-13 11:28:39+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lp2exy2kfi2t 2025-05-14 08:11:45+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lp4kgshmmk24 2025-05-14 18:58:12+00:00| seen|...

CVE-2025-32917

CVE-2025-32917 affects Checkmk’s jar_signature agent plugin. Affected versions are before 2.4.0b7 (beta), before 2.3.0p32, before 2.2.0p42, and 2.1.0p49 (EOL). The vulnerability allows a user with write access to JAVA_HOME/bin to escalate privileges. The provided documents do not contain explicit...

CVE-2025-4648

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16091 2025-05-13 10:52:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cwfrxr6j2 2025-05-13 10:52:44+00:00| seen|...

CVE-2025-40566

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions V4.1 Update 3, SIMATIC PCS neo V5.0 All versions V5.0 Update 1. Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session...

CVE-2025-32454

A vulnerability has been identified in Teamcenter Visualization V14.3 All versions V14.3.0.14, Teamcenter Visualization V2312 All versions V2312.0010, Teamcenter Visualization V2406 All versions V2406.0008, Teamcenter Visualization V2412 All versions V2412.0004, Tecnomatix Plant Simulation V2404...

CVE-2025-40581

The CVE-2025-40581 affects Siemens SCALANCE LPE9403 devices when SINEMA Remote Connect Edge Client is installed. Affected component is the authentication mechanism, with the root cause described as an authentication bypass that permits a local, non-privileged attacker to bypass authentication and...