CVE-2022-43851

creationtimestamp| type| source ---|---|--- 2025-04-14 20:54:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11700 2025-04-14 22:39:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmsmvuqvzf2h 2025-04-15 01:32:46+00:00| seen| https://t.me/cvedetector/22891...

CVE-2025-1782 Unsanitized input in language form field

In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused to include an arbitrary file in the PHP code allowing an attacker to do anything as the web server user. This flaw requires the attacker to be authenticated...

CVE-2025-3277

creationtimestamp| type| source ---|---|--- 2025-04-14 17:44:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114337555457724039 2025-04-14 20:04:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114338108373746656 2025-04-14 21:22:02+00:00| seen|...

CVE-2025-3277

An integer overflow can be triggered in SQLite’s concatws function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size 4GB can be...

CVE-2025-3277

An integer overflow can be triggered in SQLite’s concatws function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size 4GB can be...

CVE-2025-2572

creationtimestamp| type| source ---|---|--- 2025-04-14 16:40:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114337304886684246 2025-04-14 16:53:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11655 2025-04-14 18:51:18+00:00| seen| https://t.me/cvedetector/22862 2025-04-15...

CVE-2025-2475

creationtimestamp| type| source ---|---|--- 2025-04-14 16:33:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmryin4qov2j 2025-04-14 18:51:38+00:00| seen| https://t.me/cvedetector/22876...

CVE-2025-22372

CVE-2025-22372 concerns SicommNet BASEC (SaaS). The issue is an insufficiently protected credential design in BASEC that enables password recovery. The underlying problem: passwords are stored in plain text or via reversible encryption, allowing an attacker with sufficient privileges to extract p...

CVE-2024-49825

IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

CVE-2025-32910

A flaw was found in libsoup, where soupauthdigestauthenticate is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash...

CVE-2025-27889

creationtimestamp| type| source ---|---|--- 2025-04-14 15:09:36+00:00| seen| https://bsky.app/profile/mrtuxracer.bsky.social/post/3lmrtsdgwrs2j 2025-05-06 13:49:59+00:00| seen| https://bsky.app/profile/mrtuxracer.bsky.social/post/3loizmahoe222 2025-07-03 15:04:42+00:00| seen|...

CVE-2025-3570

creationtimestamp| type| source ---|---|--- 2025-04-14 14:53:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11627 2025-04-14 16:33:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmryimfqik2c 2025-04-14 18:51:24+00:00| seen|...

CVE-2025-2475 Unauthorized Bot Login Using Credentials

Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to invalidate the cache when a user account is converted to a bot which allows an attacker to login to the bot exactly one time via normal credentials...

CVE-2025-32912

CVE-2025-32912 affects libsoup (SoupAuthDigest); a NULL pointer dereference can crash the libsoup client (and possibly server) when handling authentication. Multiple advisories note patched libsoup versions (e.g., Mageia, Debian LTS, CBL-Mariner, Amazon Linux 3) and provide package upgrades. Affe...

CVE-2025-32912 Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication

A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash...

CVE-2025-32909 Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c

A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniffmp4 function. The HTTP server may cause the libsoup client to crash...

CVE-2025-32913

creationtimestamp| type| source ---|---|--- 2025-04-14 13:54:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11611 2025-04-14 14:49:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114336869784628007 2025-04-14 16:33:37+00:00| seen|...

WordPress Local Magic plugin <= 2.9.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin Local Magic versions = 2.9.0...

CVE-2025-3566

A vulnerability, which was classified as critical, has been found in veal98 小牛肉 Echo 开源社区系统 4.2. This issue affects the function uploadMdPic of the file /discuss/uploadMdPic. The manipulation of the argument editormd-image-file leads to unrestricted upload. The attack may be initiated remotely. T...

CVE-2025-22371

creationtimestamp| type| source ---|---|--- 2025-04-14 12:39:42+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lmrlgchjok2u 2025-04-14 12:39:42+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lmrlgasyzc2u 2025-04-14 12:39:43+00:00| seen|...