CVE-2025-4116 Netgear JWNR2000v2 get_cur_lang_ver buffer overflow

A vulnerability, which was classified as critical, has been found in Netgear JWNR2000v2 1.0.0.11. Affected by this issue is the function getcurlangver. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this...

CVE-2025-4114

A vulnerability classified as critical has been found in Netgear JWNR2000v2 1.0.0.11. Affected is the function checklanguagefile. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but...

CVE-2025-24350

creationtimestamp| type| source ---|---|--- 2025-04-30 12:12:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14011 2025-04-30 14:31:11+00:00| seen| Telegram/xLNolCYDHMAF4bbxCk1zERkTbjpp23tQ8mkC2YWhD-XRbxs 2025-04-30 15:55:37+00:00| seen|...

CVE-2025-24349

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated lowprivileged attacker to delete the configuration of physical network interfaces via a crafted HTTP request...

CVE-2025-24347

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the network configuration file via a crafted HTTP request...

CVE-2025-24345

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the “hosts” file in an unintended manner via a crafted HTTP request...

CVE-2025-24338

creationtimestamp| type| source ---|---|--- 2025-04-30 11:13:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14005 2025-04-30 13:31:04+00:00| published-proof-of-concept| Telegram/ZMJS5w1XZ2iVn41-DRp0jBJzL5A1-4Dr49XSwoANaTKxMXI 2025-04-30 13:55:27+00:00| seen|...

CVE-2025-4108

creationtimestamp| type| source ---|---|--- 2025-04-30 10:13:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13992 2025-04-30 12:30:28+00:00| published-proof-of-concept| Telegram/ZhniZ5nUBkwtp8WYYi-LpEBDWnNLkp1o8BA9UHNIidXRYgI 2025-04-30 13:55:26+00:00| seen|...

CVE-2025-4109

CVE-2025-4109 affects PHPGurukul Pre-School Enrollment System 1.0. The vulnerability is a SQL injection in the file /admin/edit-subadmin.php triggered by the mobilenumber parameter. It can be exploited remotely and data theft is possible as per sources. Exploit has been disclosed publicly. Mitiga...

CVE-2025-22884 ISPSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file...

CVE-2025-4003

A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB. It has been classified as problematic. This affects the function InternalApfsTranslateBlock of the file Library/RPApfsLib/RPApfsIo.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the...

CVE-2024-58099

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix packet corruption in vmxnet3xdpxmitframe Andrew and Nikolay reported connectivity issues with Cilium's service load-balancing in case of vmxnet3. If a BPF program for native XDP adds an encapsulation header such as...

CVE-2024-13943

creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-262/ 2025-04-30 20:14:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14147 2025-04-30 21:55:56+00:00| seen|...

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

CVE-2025-3991

A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/formWdsEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has...

Fedora: Security Advisory (FEDORA-2025-97687e7f68)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-46552

creationtimestamp| type| source ---|---|--- 2025-04-29 23:50:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw3q7dj2p 2025-04-30 03:42:21+00:00| seen| https://t.me/cvedetector/24061 2025-04-30 18:14:21+00:00| published-proof-of-concept|...

CVE-2023-4377

creationtimestamp| type| source ---|---|--- 2025-04-29 23:50:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw2xszj2r...

SUSE-SU-2025:1408-1 Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122244 fixes one issue. The following security issue was fixed: - CVE-2024-56650: netfilter: xtables: fix LED ID check in ledtgcheck bsc1235431...

CVE-2025-46552

KHC-INVITATION-AUTOMATION (GitHub script) has a vulnerability in version 1.2 where API responses could expose user data (email addresses, Discord usernames) due to missing access controls. The issue was identified in certain commits and has been patched in a later commit of version 1.2. No exploi...