CVE-2025-32435

Hydra is a Continuous Integration service for Nix based projects. Evaluation of untrusted non-flake nix code could potentially access secrets that are accessible by the hydra user/group. This should not affect the signing keys, that are owned by the hydra-queue-runner and hydra-www users...

CVE-2025-25427

Stored XSS vulnerability CVE-2025-25427 in TP-Link WR841N web interface (upnp.htm) allows injection of arbitrary JavaScript via the port mapping description. Impact: payload executes when the upnp page loads. Affected: WR841N v14/v14.6/v14.8

PT-2025-17330 · Undefined · Undefined

CVE-2024-26014 Rejected reason https://t.co/tBID3SoZJW...

CVE-2025-25984

CVE-2025-25984 affects Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (HW: Hw_HsAKPIQp_WF_XHR, 1020302). Connected sources describe a vulnerability enabling a physically proximate attacker to gain arbitrary code execution via the UART debug interface. Exploitation details include obtaining ...

CVE-2025-28231

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

CVE-2024-57493

An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function...

CVE-2025-25985

CVE-2025-25985 affects Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (version 1020302). The issue allows a physically proximate attacker to trigger arbitrary code execution via the vulnerable files /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user_info.ini within the device’s filesystem. C...

CVE-2025-31945

An unauthenticated attacker can obtain other users' charger information...

CVE-2025-3509

A Remote Code Execution RCE vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionality, potentially leading to privilege escalation and system compromise. The vulnerability involves using dynamically...

CVE-2025-30967

Cross-Site Request Forgery CSRF vulnerability in NotFound WPJobBoard allows Upload a Web Shell to a Web Server. This issue affects WPJobBoard: from n/a through n/a...

CVE-2025-3124

creationtimestamp| type| source ---|---|--- 2025-04-17 22:58:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12375 2025-04-18 02:53:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln2mk65orc2l 2025-04-18 03:12:06+00:00| seen| https://t.me/cvedetector/23292 2025-04-22...

CVE-2025-21582

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical...

CVE-2025-29453

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component...

CVE-2025-21581

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...

CVE-2025-29449

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12370 2025-04-17 22:53:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274owbzj2j 2025-04-18 00:41:38+00:00| seen| https://t.me/cvedetector/23281...

CVE-2025-29450

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12369 2025-04-17 22:53:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274opmhd2q 2025-04-18 00:41:39+00:00| seen|...

CVE-2025-29459

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12362 2025-04-17 22:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pvmws2r 2025-04-18 03:12:12+00:00| seen|...

CVE-2024-42178

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12361 2025-04-17 22:53:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274p5f422l 2025-04-18 03:12:14+00:00| seen| https://t.me/cvedetector/23299...

CVE-2025-29460

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12358 2025-04-17 22:53:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pymf62a 2025-04-18 03:12:13+00:00| seen|...

CVE-2025-30693

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...