CVE-2025-27578 Pixmeo OsiriX MD Use After Free

Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading to a denial-of-service condition...

CVE-2025-47732

creationtimestamp| type| source ---|---|--- 2025-05-08 22:24:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15629 2025-05-08 22:40:16+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3looy6d4ntx2n 2025-05-08 22:42:44+00:00| seen|...

CVE-2025-29972

CVE-2025-29972 describes a Server-Side Request Forgery (SSRF) in Microsoft Azure’s Storage Resource Provider (SRP) that could allow an authorized attacker to spoof network interactions. Public sources list the affected component as SRP and note the vulnerability enables spoofing of user interface...

CVE-2025-0649

Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash...

CVE-2025-45789

creationtimestamp| type| source ---|---|--- 2025-05-08 20:24:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15619 2025-05-08 21:15:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lootekokcjy2 2025-05-08...

CVE-2025-46712

Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 for OTP-27, OTP-26.2.5.12 for OTP-26, and OTP-25.3.2.21 for OTP-25, Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This...

CVE-2025-46336

creationtimestamp| type| source ---|---|--- 2025-05-08 19:48:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojp564pw2 2025-05-08 20:23:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15607 2025-05-08...

CVE-2024-9448

creationtimestamp| type| source ---|---|--- 2025-05-08 19:48:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojpjnavy2 2025-05-08 22:32:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3looxq2e52d2o 2025-05-09...

CVE-2025-46336

Rack::Session is a session management implementation for Rack. In versions starting from 2.0.0 to before 2.1.1, when using the Rack::Session::Pool middleware, and provided the attacker can acquire a session cookie already a major issue, the session may be restored if the attacker can trigger a lo...

CVE-2024-13009

creationtimestamp| type| source ---|---|--- 2025-05-08 18:24:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15583 2025-05-08 19:43:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looipib42pd2 2025-05-08...

CVE-2025-4442

creationtimestamp| type| source ---|---|--- 2025-05-08 18:22:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114473600518783822 2025-05-09 00:25:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15648 2025-05-09 00:41:25+00:00| seen|...

CVE-2025-43926

creationtimestamp| type| source ---|---|--- 2025-05-08 16:48:47+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loodjhyt7qa2 2025-05-08 20:07:33+00:00| seen| https://t.me/cvedetector/24829...

CVE-2025-26844

creationtimestamp| type| source ---|---|--- 2025-05-08 16:48:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loodjcdwzzj2 2025-05-08 20:07:46+00:00| seen| https://t.me/cvedetector/24837...

CVE-2025-44021

creationtimestamp| type| source ---|---|--- 2025-05-08 16:45:36+00:00| seen| https://seclists.org/oss-sec/2025/q2/109 2025-05-08 17:24:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15563 2025-05-08 19:11:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3loomierhsp2o...

CVE-2025-45842

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...

CVE-2025-45843

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function...

CVE-2025-43926

An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the AgentPreferences UpdateAJAX subaction can be used to set user preferences with arbitrary keys. When fetching user data via GetUserData, these keys and values are retrieved and given as a whole to other...

CVE-2025-26844

An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag...

CVE-2025-37821

In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Fix se-slice being set to U64MAX and resulting crash There is a code path in dequeueentities that can set the slice of a schedentity to U64MAX, which sometimes results in a crash. The offending case is when...

CVE-2025-4361

A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. This affects an unknown part of the file /department.php. The manipulation of the argument departmentname leads to sql injection. It is possible to initiate the attack remotely. The exploit...