CVE-2025-30445

CVE-2025-30445 is a type-confusion vulnerability addressed by Apple across multiple platforms. The issue, triggered by local-network access, could cause an unexpected app termination and was fixed with improved checks. Affected products/versions include macOS Sequoia 15.4, macOS Ventura 13.7.5, m...

CVE-2024-57698

An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change. This happens due to excessive exposure of information and the lack of adequate access control on the...

CVE-2025-46328 NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file

snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS the Driver reads logging configuration from a user-provided...

CVE-2025-4032

creationtimestamp| type| source ---|---|--- 2025-04-28 21:45:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvqh4gcsh2r 2025-04-28 22:25:52+00:00| seen| https://t.me/cvedetector/23935...

CVE-2024-11922

Missing input validation in certain features of the Web Client of Fortra's GoAnywhere prior to version 7.8.0 allows an attacker with permission to trigger emails to insert arbitrary HTML or JavaScript into an email...

CVE-2024-11922

creationtimestamp| type| source ---|---|--- 2025-04-28 21:11:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13741 2025-04-28 21:45:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114417777496345746 2025-04-28 23:45:35+00:00| seen|...

CVE-2025-31650

Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial ...

CVE-2025-45949

creationtimestamp| type| source ---|---|--- 2025-04-28 20:11:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13739 2025-04-28 23:45:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvx5ud6xr2s 2025-04-29 00:06:23+00:00| seen|...

CVE-2025-31651 Apache Tomcat: Bypass of rules in Rewrite Valve

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those...

CVE-2025-31650 Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame

Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial ...

CVE-2025-25776

creationtimestamp| type| source ---|---|--- 2025-04-28 17:45:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvczm75i42s...

CVE-2025-4028

creationtimestamp| type| source ---|---|--- 2025-04-28 17:10:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13709 2025-04-28 19:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvjzddbbl2y 2025-04-28 19:54:52+00:00| seen|...

CVE-2024-32499

creationtimestamp| type| source ---|---|--- 2025-04-28 17:10:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13708 2025-04-28 19:50:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvjzdk2k72j 2025-04-28 19:54:53+00:00| seen| https://t.me/cvedetector/23916...

CVE-2025-43857

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.5.7, 0.4.20, 0.3.9, and 0.2.5, there is a possibility for denial of service by memory exhaustion when net-imap reads server responses. At any time while the client is connected, a maliciou...

CVE-2025-43854

DIFY is an open-source LLM app development platform. Prior to version 1.3.0, a clickjacking vulnerability was found in the default setup of the DIFY application, allowing malicious actors to trick users into clicking on elements of the web page without their knowledge or consent. This can lead to...

CVE-2025-23377

creationtimestamp| type| source ---|---|--- 2025-04-28 15:10:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13685 2025-04-28 17:45:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvczmw2s42a 2025-04-28 19:55:16+00:00| seen| https://t.me/cvedetector/23933...

CVE-2025-4023

The CVE-2025-4023 entry concerns itsourcecode Placement Management System 1.0 with a SQL injection in the file /add_company.php triggered by manipulating the Name parameter. The vulnerability is exploitable remotely and could impact confidentiality, integrity, and availability as described in the...

CVE-2025-42598

creationtimestamp| type| source ---|---|--- 2025-04-28 09:40:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxj5ckb2s 2025-04-28 13:13:37+00:00| seen| https://t.me/cvedetector/23900 2025-04-30 19:56:26+00:00| seen|...

CVE-2025-0627

creationtimestamp| type| source ---|---|--- 2025-04-28 09:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxj2egy2l 2025-04-28 09:52:47+00:00| seen| https://t.me/cvedetector/23883 2025-04-28 17:10:42+00:00| published-proof-of-concept|...

CVE-2025-32471

CVE-2025-32471 concerns SICK device password handling where passwords are not adequately salted, enabling potential password extraction. Connected sources reference SICK Flexi Compact and related controllers (e.g., FLX0-GPNT100, FLX3-CPUC200) as affected. The CVE description and Red Hat/NVD entri...