CVE-2024-58251

creationtimestamp| type| source ---|---|--- 2025-04-23 21:14:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnj4fbrchr2j 2025-04-23 22:50:51+00:00| seen| https://t.me/cvedetector/23617 2025-04-24 00:05:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13167 2026-03-19...

CVE-2025-46399

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via gengeitpspline function...

CVE-2025-46399 Xfig: transfig: fig2dev segmentation fault vulnerability

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via gengeitpspline function...

CVE-2024-58251

In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv0 containing an ANSI terminal escape sequence, leading to a denial of service terminal locked up when netstat is used by a victim...

GHSA-5P73-QG2V-383H

creationtimestamp| type| source ---|---|--- 2025-04-23 18:05:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13091...

CVE-2025-3907

Cross-Site Request Forgery CSRF vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9...

CVE-2025-2768

Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system i...

CVE-2025-2764

CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of CarlinKit CPC200-CCPA devices. Although authentication is required to exploit...

CVE-2025-28022

TOTOLINK A810R V4.1.2cu.5182B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter...

CVE-2025-1521

PostHog slackincomingwebhook Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists with...

CVE-2025-1046

Luxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a maliciou...

CVE-2025-2761

GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open ...

CVE-2025-2773 BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability

BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BEC Technologies Multiple Routers. Although authentication is required to exploit this vulnerability,...

CVE-2025-32969

creationtimestamp| type| source ---|---|--- 2025-04-23 16:44:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114388282485493837 2025-04-23 17:19:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnipaqcyvd2d 2025-08-28 13:41:24+00:00| confirmed|...

CVE-2025-1047

Luxion KeyShot is affected by CVE-2025-1047 through a vulnerability in PVS file parsing caused by an uninitialized pointer. The issue enables Remote Code Execution in the context of the current process and requires user interaction (target visits a malicious page or opens a malicious file). The v...

CVE-2025-21605

creationtimestamp| type| source ---|---|--- 2025-04-23 16:43:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114388277180826920 2025-04-23 17:19:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnipaq7nh22y 2025-04-23 20:32:34+00:00| published-proof-of-concept|...

CVE-2025-32966

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8...

CVE-2025-21605

Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the outpu...

CVE-2024-47829

creationtimestamp| type| source ---|---|--- 2025-04-23 15:41:08+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lnijr22bms2h 2025-04-23 17:19:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnipaqz3vk2y 2025-05-03 15:35:52+00:00| seen|...

CVE-2025-42603

creationtimestamp| type| source ---|---|--- 2025-04-23 11:20:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13023 2025-04-23 13:15:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnibm4dd6z2u 2025-04-23 14:28:51+00:00| seen| https://t.me/cvedetector/23582...