CVE-2023-45721

creationtimestamp| type| source ---|---|--- 2025-04-30 22:14:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14185 2025-05-01 01:56:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo37f57hfh2h 2025-05-01 02:17:24+00:00| seen| https://t.me/cvedetector/24167...

CVE-2023-4533

creationtimestamp| type| source ---|---|--- 2025-04-30 22:14:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14179 2025-05-01 01:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo37f4opl22p...

CVE-2024-30146

The CVE-2024-30146 entry concerns HCL Domino Leap. Affected component: the endpoint handling import of applications. Root cause: improper access control allowing certain admin users to import applications from the server’s filesystem. Impact as described: potential unauthorized filesystem access ...

CVE-2025-24132

CVE-2025-24132 affects Apple AirPlay SDKs (AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126) and the CarPlay plug‑in (R18.1). The issue is described as a memory handling vulnerability that can cause an application to terminate when exploited from the local network. Public connected documents ...

CVE-2025-4139 Netgear EX6120 fwAcosCgiInbound buffer overflow

A vulnerability classified as critical was found in Netgear EX6120 1.0.0.68. Affected by this vulnerability is the function fwAcosCgiInbound. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure b...

CVE-2024-6032

Tesla Model S Iris Modem qlatfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target system in order to exploit this...

CVE-2024-13943

CVE-2024-13943 describes a local sandbox-escape vulnerability in the Tesla Model S Iris Modem, specifically within the QCMAP_ConnectionManager. The flaw allows a low-privilege local attacker to exploit improper input validation to assign LAN addresses to the WWAN, enabling access to network servi...

CVE-2025-2170

creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14138 2025-04-30 19:23:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114428543253184581 2025-04-30 22:05:56+00:00| seen| https://t.me/cvedetector/24130 2025-05-02...

CVE-2025-2170

CVE-2025-2170 is a Server-side request forgery (SSRF) affecting the SonicWall SMA1000 Appliance Work Place interface. Under certain conditions a remote unauthenticated attacker could cause the appliance to make requests to an unintended location. SonicWall PSIRT advises upgrading to the latest ho...

CVE-2025-46557

Summary: CVE-2025-46557 affects XWiki platforms from multiple lines of release streams (15.3-rc-1 up to before 15.10.14; 16.0.0-rc-1 up to before 16.4.6; 16.5.0-rc-1 up to before 16.10.0-rc-1). A user who can view pages in the XWiki space can access XWiki.Authentication.Administration and, unless...

CVE-2025-32777

CVE-2025-32777 affects Volcano Scheduler (volcano.sh/volcano). The issue allows denial of service by compromising either the Elastic service or the extender plugin in Kubernetes clusters, enabling privilege escalation across node isolation boundaries. Affected versions include 1.11.0-network-topo...

CVE-2024-47784 Unverified Password Change

Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version 1.1.4 and earlier...

CVE-2025-21416

Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network...

CVE-2025-33074

The CVE-2025-33074 entry describes an improper verification of cryptographic signatures in Microsoft Azure Functions, enabling an authenticated attacker to execute code over a network. Several connected sources corroborate the issue across vendors and regions (NVD/NVDC, Red Hat, CNVD, MSRC, PT Se...

CVE-2025-4122

A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been rated as critical. Affected by this issue is the function sub435E04. The manipulation of the argument host leads to command injection. The attack may be launched remotely. The vendor was contacted early about this disclosure bu...

CVE-2025-32376

creationtimestamp| type| source ---|---|--- 2025-04-30 15:13:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14051 2025-04-30 16:07:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427772732716398 2025-04-30 17:55:10+00:00| seen|...

CVE-2025-4120 Netgear JWNR2000v2 sub_4238E8 buffer overflow

A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been classified as critical. Affected is the function sub4238E8. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but...

CVE-2025-4118 Weitong Mall Product History historyList access control

A vulnerability classified as critical has been found in Weitong Mall 1.0.0. This affects an unknown part of the file /historyList of the component Product History Handler. The manipulation of the argument isDelete with the input 1 leads to improper access controls. It is possible to initiate the...

CVE-2025-45020

creationtimestamp| type| source ---|---|--- 2025-04-30 13:13:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14024 2025-04-30 15:55:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo25tbbs2z2o 2025-04-30 16:14:28+00:00| seen|...

CVE-2025-4117

creationtimestamp| type| source ---|---|--- 2025-04-30 13:13:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14023 2025-04-30 15:55:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo25tbzwpq22 2025-04-30 16:14:26+00:00| seen|...