CVE-2024-13597

creationtimestamp| type| source ---|---|--- 2025-04-14 12:33:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl3457cn2c 2025-04-14 17:10:59+00:00| seen| https://t.me/cvedetector/22856...

CVE-2025-3565

CVE-2025-3565 affects huanfenz/code-projects StudentManager 1.0, specifically the /upload/uploadArticle.do path in the Announcement Management Section. The root cause is manipulation of the File parameter, enabling unrestricted file upload and remote exploitation. Public exploit information exist...

CVE-2025-3565 huanfenz/code-projects StudentManager Announcement Management Section uploadArticle.do unrestricted upload

A vulnerability classified as critical was found in huanfenz/code-projects StudentManager 1.0. This vulnerability affects unknown code of the file /upload/uploadArticle.do of the component Announcement Management Section. The manipulation of the argument File leads to unrestricted upload. The...

CVE-2025-3558

creationtimestamp| type| source ---|---|--- 2025-04-14 08:55:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11587 2025-04-14 12:33:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl32wo5o2h 2025-04-14 12:59:21+00:00| seen|...

CVE-2025-3558

CVE-2025-3558 (ghostxbh uzy-ssm-mall 1.0.0) : Affects the endpoint /mall/user/uploadUserHeadImage where the File parameter can be manipulated to achieve unrestricted file upload. Root cause is an input validation/upload handling issue, enabling remote exploitation. Exploit public; vendor did not ...

CVE-2025-31344

Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2...

CVE-2025-31344

Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2...

CVE-2025-31344

Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib: through 5.2.2...

CVE-2025-32093

Mattermost contains an authorization issue in versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, and 9.11.x

CVE-2024-9230 PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which could allow author and above users to perform Stored Cross-Site Scripting attacks...

CVE-2024-36347

creationtimestamp| type| source ---|---|--- 2025-04-14 05:30:21+00:00| seen| https://bsky.app/profile/inmobi-info.bsky.social/post/3lmqtgktnqo22 2025-06-27 22:55:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19794 2025-06-28 00:39:21+00:00| seen|...

CVE-2025-3572

creationtimestamp| type| source ---|---|--- 2025-04-14 04:33:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmqqa2wrnv2q 2025-04-14 05:30:17+00:00| seen| Telegram/egwfazapRWavjx9LjYRJnZIUpq7wdeRdkUxWPpSsP7VQ 2025-04-14 06:17:35+00:00| seen| https://t.me/cvedetector/22819...

CVE-2025-3549

A flaw was found in the Open Asset Import Library Assimp, where the Assimp::MD3Importer::ValidateSurfaceHeaderOffsets function of the code/AssetLib/MD3/MD3Loader.cpp file of the component File Handler is affected. Manipulation leads to a heap-based buffer overflow. Mitigation Mitigation for this...

CVE-2025-32931

DevDojo Voyager 1.4.0 through 1.8.0, when Laravel 8 or later is used, allows authenticated administrators to execute arbitrary OS commands via a specific php artisan command...

Joomla! Authentication Bypass Vulnerability (20250402)

Joomla! is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

CVE-2025-3541

creationtimestamp| type| source ---|---|--- 2025-04-13 23:52:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11571 2025-04-14 00:48:25+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114333561991468804 2025-04-14 01:31:07+00:00|...

CVE-2025-2269

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘imageid’ parameter in all versions up to, and including, 1.8.34 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-3445

A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the...

CVE-2024-56406

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

CVE-2025-3536

creationtimestamp| type| source ---|---|--- 2025-04-13 11:52:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11559 2025-04-13 14:28:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmpazlmrnu2r 2025-04-13 16:05:20+00:00| seen|...