CVE-2025-27081

creationtimestamp| type| source ---|---|--- 2025-04-10 08:48:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11198 2025-04-10 11:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmhfsnsacr2v 2025-04-10 13:41:24+00:00| seen| https://t.me/cvedetector/22645...

CVE-2025-30653

creationtimestamp| type| source ---|---|--- 2025-04-09 20:48:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11176 2025-04-09 23:28:01+00:00| seen| https://t.me/cvedetector/22588 2025-04-09 23:38:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmg5v2w4sp2u...

CVE-2025-21205 Windows Telephony Service Remote Code Execution Vulnerability

...

CVE-2025-277487

creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...

CVE-2025-29810

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 17:46:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10965 2025-04-09 18:06:34+00:00| seen|...

CVE-2025-21439 Out-of-bounds Read in Windows WLAN Host

Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer...

CVE-2025-3219 CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting

A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is...

CVE-2025-3215

creationtimestamp| type| source ---|---|--- 2025-04-04 06:35:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10406 2025-04-04 09:12:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lly35w6ov62i 2025-04-04 10:29:15+00:00| seen|...

CVE-2025-31115

The CVE-2025-31115 affects XZ Utils’ liblzma multithreaded .xz decoder (lzma_stream_decoder_mt) in versions 5.3.3alpha through 5.8.0. The issue can cause a crash with heap-use-after-free and writes to memory based on a NULL pointer plus an offset, impacting applications/libraries that invoke the ...

CVE-2025-3160

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCombiner::AddNodeHashes of the file code/Common/SceneCombiner.cpp of the component File Handler. The manipulation leads to out-of-bounds rea...

CVE-2025-22007

creationtimestamp| type| source ---|---|--- 2025-04-03 07:34:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10176 2025-04-03 11:03:08+00:00| seen| https://t.me/cvedetector/21953 2025-04-03 11:12:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvrfdfjsl2z...

CVE-2025-2874

creationtimestamp| type| source ---|---|--- 2025-04-03 07:34:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10174 2025-04-03 11:03:12+00:00| seen| https://t.me/cvedetector/21954 2025-04-03 11:12:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvrfdmhxf24...

CVE-2025-30429

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-21990

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo-tbo.resource will be NULL. Check for that before dereferencing. cherry picked from commit...

CVE-2024-45700

Zabbix server is vulnerable to a DoS vulnerability due to uncontrolled resource exhaustion. An attacker can send specially crafted requests to the server, which will cause the server to allocate an excessive amount of memory and perform CPU-intensive decompression operations, ultimately leading t...

CVE-2024-36465

A low privilege regular Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter...

CVE-2025-21946

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parsesecdesc If osidoffset, gsidoffset and dacloffset could be greater than smbntsd struct size. If it is smaller, It could cause slab-out-of-bounds. And when validating sid, It need to check it includ...

CVE-2025-21934

In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rioaddnet fails rioaddnet calls deviceregister and fails when deviceregister fails. Thus, putdevice should be used rather than kfree. Add "mport-net = NULL;" to avoid a use after free issue...

CVE-2025-21908

In the Linux kernel, the following vulnerability has been resolved: NFS: fix nfsreleasefolio to not deadlock via kcompactd writeback Add PFKCOMPACTD flag and currentiskcompactd helper to check for it so nfsreleasefolio can skip calling nfswbfolio from kcompactd. Otherwise NFS can deadlock waiting...

CVE-2025-3082

A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version...