CVE-2025-3620

Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-3619

Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2025-29648

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2025-3725 PCMan FTP Server MIC Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component MIC Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to...

CVE-2025-32817

creationtimestamp| type| source ---|---|--- 2025-04-16 19:56:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12151 2025-04-17 00:26:00+00:00| seen| https://t.me/cvedetector/23182 2025-04-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-253/ 2025-05-02...

CVE-2025-29649

creationtimestamp| type| source ---|---|--- 2025-04-16 19:56:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12146 2025-04-17 00:26:03+00:00| seen| https://t.me/cvedetector/23186 2025-04-17 16:34:28+00:00| seen|...

CVE-2025-3723 PCMan FTP Server MDTM Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processing of the component MDTM Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may b...

CVE-2025-32872

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapudxqd2u 2025-04-16 20:48:48+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349606189879832 2025-04-16 21:54:50+00:00| seen|...

CVE-2025-39472

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapt5kti2h 2025-04-16 21:54:50+00:00| seen| https://t.me/cvedetector/23150 2026-04-01 21:29:56+00:00| seen| Telegram/DpyuY30DJ1pr5lpZ1TsoyLIWT-1QQs66jLQv08yWDwU2R9I...

CVE-2025-32859

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapswj3t2z 2025-04-16 20:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605703951184 2025-04-16 21:55:12+00:00| seen|...

CVE-2025-32862

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapszxdg2h 2025-04-16 20:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605791420638 2025-04-16 21:55:03+00:00| seen|...

CVE-2025-32866

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'GetLogs' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write t...

CVE-2025-32850

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockTcmSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

CVE-2025-32827

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'ActivateProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

CVE-2025-30031

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateUsers' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and wri...

CVE-2025-22872

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

CVE-2025-32871

Siemens TeleControl Server Basic (versions before 3.1.2.2) contains SQL injection via the MigrateDatabase path. An authenticated remote attacker who can reach port 8000 can bypass authorization, read/write the application database, and execute code with NT AUTHORITY\NetworkService privileges. Evi...

CVE-2025-32866

CVE-2025-32866 affects Siemens TeleControl Server Basic (all versions

CVE-2025-32863

CVE-2025-32863 affects Siemens TeleControl Server Basic prior to v3.1.2.2. The vulnerability is an SQL injection in the UnlockTraceLevelSettings pathway that can allow an authenticated remote attacker to bypass authorization, read/write the application DB, and execute code with NT AUTHORITY\Netwo...

CVE-2025-32849

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockSmtpSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from...