CVE-2024-13009

A flaw was found in Eclipse Jetty. This vulnerability allows corrupted and inadvertent data sharing between requests via a gzip error when inflating a request body. If the request body is malformed, the gzip decompression process can fail, resulting in the application inadvertently using data fro...

CVE-2025-30698

creationtimestamp| type| source ---|---|--- 2025-05-10 17:41:14+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lotiff2hm22y 2025-05-11 02:21:13+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3loufha4sjx23 2025-06-16 20:58:27+00:00| seen|...

CVE-2025-4500

creationtimestamp| type| source ---|---|--- 2025-05-10 13:27:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15894 2025-05-10 14:26:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5awmppo42 2025-05-10...

CVE-2025-4501

creationtimestamp| type| source ---|---|--- 2025-05-10 13:27:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15893 2025-05-10 14:27:47+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5baqsj3r2 2025-05-10...

CVE-2025-1752

CVE-2025-1752 affects run-llama/llama_index’s KnowledgeBaseWebReader, specifically the get_article_urls function. The DoS arises from improper handling of max_depth, allowing unbounded recursion (depth-first crawling) to exhaust Python’s recursion limit and crash the process. Affected version is ...

CVE-2025-4499

creationtimestamp| type| source ---|---|--- 2025-05-10 12:27:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15891 2025-05-10 14:26:47+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5bccneaa2 2025-05-10...

CVE-2025-3878 SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's saverify shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2025-4498 code-projects Simple Bus Reservation System Install Bus install stack-based overflow

A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0. Affected is the function a::install of the component Install Bus. The manipulation of the argument bus leads to stack-based buffer overflow. It is possible to launch the attack on the local...

CVE-2025-47768

creationtimestamp| type| source ---|---|--- 2025-05-10 06:31:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loscyib5yk2h 2025-05-10 07:16:00+00:00| seen| https://t.me/cvedetector/24997...

CVE-2025-4495

A vulnerability has been found in JAdmin-JAVA JAdmin 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /memoAjax/save. The manipulation of the argument ID leads to cross site scripting. The attack can be launched remotely. The exploit has be...

CVE-2025-47814

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c...

CVE-2025-3794

creationtimestamp| type| source ---|---|--- 2025-05-09 23:25:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15857 2025-05-10 00:05:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lormmzq2ajr2 2025-05-10 02:31:40+00:00| seen|...

CVE-2025-41399

When a Stream Control Transmission Protocol SCTP profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-41414

When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-4494

creationtimestamp| type| source ---|---|--- 2025-05-09 22:14:45+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lorghfut36s2 2025-05-09 22:26:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15854 2025-05-09...

CVE-2025-4489

creationtimestamp| type| source ---|---|--- 2025-05-09 22:09:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lorckv66c6d2 2025-05-09 23:31:22+00:00| published-proof-of-concept| Telegram/HfdZK7IaNw2IgiSWMbJAgdBOWQpganIAskYVFqg6YQ3yyg...

CVE-2025-47269

creationtimestamp| type| source ---|---|--- 2025-05-09 21:25:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114479986017956254 2025-05-09 22:14:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lorghjngs262 2025-05-09...

CVE-2025-4491 Campcodes Online Food Ordering System ticket-status.php sql injection

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2027-31337

creationtimestamp| type| source ---|---|--- 2025-05-09 18:31:50+00:00| seen| https://bsky.app/profile/unauthorized.computer/post/3lor2qywxcc2b...

CVE-2025-20198

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...