CVE-2024-58252

Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-46586

Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-46585

Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-2802

creationtimestamp| type| source ---|---|--- 2025-05-06 05:20:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15059 2025-05-06 06:21:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajnldr22l 2025-05-06 07:00:55+00:00| published-proof-of-concept|...

CVE-2025-4310

creationtimestamp| type| source ---|---|--- 2025-05-06 04:20:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15050 2025-05-06 06:21:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajnzsby2n 2025-05-06 08:37:15+00:00| exploited|...

CVE-2025-4311

creationtimestamp| type| source ---|---|--- 2025-05-06 04:20:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15044 2025-05-06 06:21:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajoerph2h 2025-05-06 07:00:55+00:00| published-proof-of-concept|...

CVE-2025-4096

Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-4312 SourceCodester Advanced Web Store productdetail.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2024-58098

In the Linux kernel, the following vulnerability has been resolved: bpf: track changespktdata property for global functions When processing calls to certain helpers, verifier invalidates all packet pointers in a current state. For example, consider the following program: attributenoinline long...

CVE-2025-47296

creationtimestamp| type| source ---|---|--- 2025-05-06 03:20:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15035 2025-05-06 06:21:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajnajsf2h 2025-05-06 08:37:28+00:00| seen| https://t.me/cvedetector/24555...

CVE-2025-4306 PHPGurukul Nipah Virus Testing Management System edit-phlebotomist.php sql injection

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely...

CVE-2025-4306

CVE-2025-4306 concerns a SQL injection in PHPGurukul Nipah Virus Testing Management System 1.0, caused by improper handling of the mobilenumber parameter in the file /edit-phlebotomist.php . Multiple connected sources confirm the vulnerability can be exploited remotely and that the exploit has be...

CVE-2025-2509

creationtimestamp| type| source ---|---|--- 2025-05-06 01:20:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15016 2025-05-06 04:16:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lohzjx3cb22h 2025-05-06 04:26:10+00:00| seen| https://t.me/cvedetector/24526...

CVE-2025-2509

Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to VM escape via crafted vertex elements data triggering an out-of-bounds read in utilformatdescription...

CVE-2025-46728

cpp-httplib is a C++ header-only HTTP/HTTPS server and client library. Prior to version 0.20.1, the library fails to enforce configured size limits on incoming request bodies when Transfer-Encoding: chunked is used or when no Content-Length header is provided. A remote attacker can send a chunked...

CVE-2025-4299 Tenda AC1206 openSchedWifi setSchedWifi buffer overflow

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public...

CVE-2025-46728

cpp-httplib is a C++ header-only HTTP/HTTPS server and client library. Prior to version 0.20.1, the library fails to enforce configured size limits on incoming request bodies when Transfer-Encoding: chunked is used or when no Content-Length header is provided. A remote attacker can send a chunked...

CVE-2025-47256

Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...

CVE-2025-47256

Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...

CVE-2025-4290 PCMan FTP Server SMNT Command buffer overflow

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component SMNT Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the...