CVE-2025-44071

CVE-2025-44071 concerns SeaCMS v13.3 with a remote code execution (RCE) vulnerability in the phomebak.php component. The issue is described as an improper handling/exposure of phomebak.php that allows an attacker to execute arbitrary code via a crafted request. Impact is high (C/H/I/A = 9.8) with...

CVE-2025-45607

An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request...

CVE-2025-43915

This CVE (CVE-2025-43915) affects Linkerd edge releases before edge-25.2.1 and Buoyant Enterprise for Linkerd versions 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, causing resource exhaustion in Linkerd proxy metrics. The underlying issue is metrics data consumi...

CVE-2023-53137

In the Linux kernel, the following vulnerability has been resolved: ext4: Fix possible corruption when moving a directory When we are renaming a directory to a different directory, we need to update '..' entry in the moved directory. However nothing prevents moved directory from being modified an...

CVE-2023-53113

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix NULL-ptr deref in offchan check If, e.g. in AP mode, the link was already created by userspace but not activated yet, it has a chandef but the chandef isn't valid and has no channel. Check for this and ignore...

CVE-2024-55913

IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2025-47226

A flaw was found in the Snipe-IT component. The affected versions contain incorrect authorization protocols for accessing asset information. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising...

CVE-2025-47244

creationtimestamp| type| source ---|---|--- 2025-05-03 23:18:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14709 2025-05-04 01:39:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3locl5aiq4ys2 2025-05-04 02:11:37+00:00| seen|...

CVE-2025-4183

A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RECV Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

CVE-2025-27365

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it...

CVE-2025-47241

creationtimestamp| type| source ---|---|--- 2025-05-03 21:19:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14707 2025-05-03 21:34:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3locbxtg3ujs2 2025-05-03...

CVE-2025-4242

creationtimestamp| type| source ---|---|--- 2025-05-03 19:17:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14704 2025-05-03 19:40:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lobysz7apgf2 2025-05-03...

CVE-2024-58134

creationtimestamp| type| source ---|---|--- 2025-05-03 16:19:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14696 2025-05-03 18:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lobwjlvi2r2o 2025-05-03 19:37:35+00:00| seen|...

CVE-2024-58134

Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default. These predictable default secrets can be exploited by an attacker to forge session cookies. An attacker who knows or guesses the secret could compute...

CVE-2025-4237

PCMan FTP Server 2.0.7 is affected by a buffer overflow in the MDELETE Command Handler. The root cause is improper validation of input length, allowing remote exploitation and potential DoS. Public exploitation information is present in the initial description and echoed in connected CNVD entries...

CVE-2024-58135

Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...

BELL-CVE-2025-37794

Bulletin has no description...

BELL-CVE-2025-37742

Bulletin has no description...

CVE-2025-47229

creationtimestamp| type| source ---|---|--- 2025-05-03 03:19:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14689 2025-05-03 03:26:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loafey3lo7x2 2025-05-03 06:05:36+00:00| seen|...

CVE-2024-13738

creationtimestamp| type| source ---|---|--- 2025-05-03 03:00:20+00:00| seen| https://bsky.app/profile/potato.software/post/3loadvtqidf2m 2025-05-03 03:26:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loafeewn5vx2 2025-05-03...