CVE-2025-2866

creationtimestamp| type| source ---|---|--- 2025-04-27 21:40:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnt7ovshzv2d 2025-04-27 23:00:35+00:00| seen| https://t.me/cvedetector/23858 2025-04-30 09:12:49+00:00| seen|...

CVE-2025-4020

creationtimestamp| type| source ---|---|--- 2025-04-27 19:23:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114411556875621526 2025-04-28 13:10:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13677 2025-04-28 13:40:07+00:00| seen|...

CVE-2025-3982

creationtimestamp| type| source ---|---|--- 2025-04-27 19:09:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13630 2025-04-27 21:40:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnt7owda4g24 2025-04-27 23:00:40+00:00| seen|...

CVE-2025-3980

creationtimestamp| type| source ---|---|--- 2025-04-27 18:10:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13628 2025-04-27 21:20:12+00:00| seen| https://t.me/cvedetector/23851 2025-04-27 21:40:21+00:00| seen|...

CVE-2025-4014

creationtimestamp| type| source ---|---|--- 2025-04-27 15:20:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114410601339069486 2025-04-28 10:10:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13667 2025-04-28 13:13:31+00:00| seen|...

CVE-2025-3974

creationtimestamp| type| source ---|---|--- 2025-04-27 15:10:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13621 2025-04-27 15:35:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnslbqfqm72l 2025-04-27 18:00:13+00:00| published-proof-of-concept|...

CVE-2025-3972

creationtimestamp| type| source ---|---|--- 2025-04-27 14:09:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13619 2025-04-27 15:35:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnslbqc7nd2b 2025-04-27 17:01:02+00:00| published-proof-of-concept|...

CVE-2024-6199

An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS DDNS traffic between DDNS services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem. Customers that have not enabled Dynamic DNS on their modem...

CVE-2025-3971 PHPGurukul COVID19 Testing Management System add-phlebotomist.php sql injection

A vulnerability classified as critical was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack can be launched remotely. T...

CVE-2025-3964

creationtimestamp| type| source ---|---|--- 2025-04-27 09:09:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13611 2025-04-27 11:32:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lns5or43kri2 2025-04-27...

CVE-2024-52887

creationtimestamp| type| source ---|---|--- 2025-04-27 08:08:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13609 2025-04-27 11:23:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lns564rwbto2 2025-04-27 11:34:47+00:00| seen|...

CVE-2025-3861

The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access and modification of data| due to a misconfigured capability check on the 'pdalitecustompermissioncheck' function in versions 2.8.6 to 2.8.8.2. This makes it possible for authenticated...

CVE-2025-46672

creationtimestamp| type| source ---|---|--- 2025-04-27 01:08:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13592 2025-04-27 01:48:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114407408963291150 2025-04-27 03:35:24+00:00| seen|...

CVE-2025-32984

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting XSS via a certain POST parameter...

CVE-2025-28354

An issue in the Printer Manager Systm of Entrust Corp Printer Manager D3.18.4-3 and below allows attackers to execute a directory traversal via a crafted POST request...

CVE-2024-57375

Andamiro Pump It Up 20th Anniversary aka Double X or XX/2019 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service application crash via certain deselect actions...

CVE-2025-46689

CVE-2025-46689 affects Ververica Platform 2.14.0 with a Reflected XSS vulnerability exposed via the URI path namespaces/default/formats . The issue involves user-controlled input in that path, allowing an attacker to trigger script execution in a victim’s browser when the vulnerable page is loade...

CVE-2025-46673

Summary: CVE-2025-46673 affects NASA CryptoLib prior to 1.3.2. The library does not check whether the SA is in an operational state before use, which could allow bypassing the Space Data Link Security (SDLS) protocol. Affected software: NASA CryptoLib up to version 1.3.1 (pre-1.3.2). Impact (per ...

CVE-2025-46690

Ververica Platform 2.14.0 allows low-privileged users to access SQL connectors via a direct namespaces/default/formats request...

CVE-2025-3954

creationtimestamp| type| source ---|---|--- 2025-04-26 22:10:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13588 2025-04-26 23:35:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnqvnigal32l 2025-04-27 00:30:41+00:00| seen|...