CVE-2025-20950

Use of implicit intent for sensitive communication in SamsungNotes prior to version 4.4.26.45 allows local attackers to access sensitive information...

CVE-2025-20944

Out-of-bounds read in parsing audio data in libsavsac.so prior to SMR Apr-2025 Release 1 allows local attackers to read out-of-bounds memory...

CVE-2025-0539

CVE-2025-0539 affects Octopus Deploy on Windows where the server can be coerced into issuing server-side requests that include authentication material. The underlying impact is that a suitably positioned attacker could compromise the account running the Octopus Server and potentially affect the h...

CVE-2025-3102

The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secretkey' value in the 'autheticateuser' function in all versions up to, and including, 1.0.78. Th...

CVE-1202-12222

creationtimestamp| type| source ---|---|--- 2025-04-10 03:27:56+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmgkpz3llk2r...

CVE-2025-26479

creationtimestamp| type| source ---|---|--- 2025-04-10 02:49:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11188 2025-04-10 06:59:53+00:00| seen| https://t.me/cvedetector/22620 2025-04-10 13:58:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114314020757340212...

CVE-2025-25197 - XSS attack in elemental "Content blocks in use" report

More info at https://www.silverstripe.org/download/security-releases/cve-2025-25197...

CVE-2025-32743

In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This allows attackers to cause a denial of service application crash or possibly execute arbitrary code, because those lookup values lead to...

CVE-2025-32807

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png and .svg or .xpm for some configurations via the icon parameter of a GET request to geticon.php...

📄 PandoraFMS 7.0NG.772 SQL Injection

PandoraFMS version 7.0NG.772 proof of concept authenticated remote SQL injection exploit. Exploit Title: PandoraFMS console v7.0NG.772 - SQL Injection Authenticated Date: 21/11/2023 Exploit Author: Osama Yousef Vendor Homepage: https://pandorafms.com/ Software Link:...

CVE-2025-29088

In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service application crash. An sznBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect...

CVE-2025-27812

MSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation...

CVE-2025-27813

MSI Center before 2.0.52.0 has Missing PE Signature Validation...

CVE-2025-30648

creationtimestamp| type| source ---|---|--- 2025-04-09 23:28:08+00:00| seen| https://t.me/cvedetector/22594 2025-04-09 23:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmg5v6x2n42h...

CVE-2025-30651

creationtimestamp| type| source ---|---|--- 2025-04-09 20:22:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114309865308254607 2025-04-09 20:48:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11165 2025-04-09 23:28:13+00:00| seen| https://t.me/cvedetector/22596 2025-04-09...

CVE-2025-30647

A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial-of-Service DoS. In a subscriber management scenario, login/logout activity triggers a memo...

CVE-2025-30645

A NULL Pointer Dereference vulnerability in the flow daemon flowd of Juniper Networks Junos OS on SRX Series allows an attacker causing specific, valid control traffic to be sent out of a Dual-Stack DS Lite tunnel to crash the flowd process, resulting in a Denial of Service DoS. Continuous...

CVE-2025-26888

Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through = 5.3.8...

CVE-2025-21595

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause an FPC to crash, leading to Denial of Service DoS. On all Junos OS and Junos OS Evolved...

CVE-2025-30645

The CVE describes a NULL-pointer dereference in the flowd daemon of Juniper Networks Junos OS on SRX Series. When specific, valid DS-Lite control traffic is sent, flowd can crash (segmentation fault), causing a DoS/network outage until flowd restarts. Affected are Junos OS on SRX Series: all vers...