CVE-2025-22044

CVE-2025-22044 (Linux kernel) : The issue arises in acpi_nfit_ctl where a narrowing conversion from u64 to int can allow an invalid argument when nd_family is non-zero but its lower 32 bits are zero. Syzkaller warned that to_nfit_bus_uuid() may translate to a non-secondary bus family, and the fix...

CVE-2025-22040 ksmbd: fix session use-after-free in multichannel connection

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race condition between session setup and ksmbdsessionsderegister. The session can be freed before the connection is added to channel list of session. This...

CVE-2025-22029

...

CVE-2025-39560 WordPress Live Forms plugin <= 4.8.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through = 4.8.4...

CVE-2025-39582 WordPress WP Data Access plugin <= 5.5.36 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Passionate Programmer Peter WP Data Access wp-data-access allows DOM-Based XSS.This issue affects WP Data Access: from n/a through = 5.5.36...

CVE-2025-22021

In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for IPv4 packets to restore the original 5-tuple in case of SNAT, to be able to find the right socket if any. Then socketmatch can...

CVE-2025-3681

creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfuqyizl2j 2025-04-16 10:55:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12011 2025-04-16 12:31:18+00:00| published-proof-of-concept|...

CVE-2024-52281

The CVE-2024-52281 issue is a Stored XSS vulnerability in Rancher UI caused by improper neutralization of cluster description input during web page generation. It affects Rancher versions 2.9.0 through before 2.9.4. Successful exploitation could allow a malicious actor to inject and store malicio...

CVE-2025-3247

creationtimestamp| type| source ---|---|--- 2025-04-16 05:56:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11990 2025-04-16 06:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmvyq73c3a2z 2025-04-16 10:10:32+00:00| seen|...

CVE-2025-28072

PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php...

CVE-2025-28072

The CVE-2025-28072 entry concerns PHPGurukul Pre-School Enrollment System, where the manage-teachers.php module is vulnerable to Directory Traversal due to improper filtering of user input paths. This summary consolidates multiple references reporting the same issue; the CVSS 3.1 vector indicates...

CVE-2025-30215

CVE-2025-30215 affects NATS-Server. In versions 2.2.0 through just before 2.10.27 and 2.11.1, the management of JetStream assets via the $JS namespace in the system account was partially exposed to regular accounts. This allowed certain JS API requests with management permissions in any account t...

CVE-2025-24850

An attacker can export other users' plant information...

CVE-2025-31949

An authenticated attacker can obtain any plant name by knowing the plant ID...

CVE-2025-1275

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-1277

A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2025-30740

...

CVE-2025-30733

...

CVE-2025-30733

CVE-2025-30733 affects Oracle Database Server’s RDBMS Listener component. Affected releases are 19.3–19.26, 21.3–21.17, and 23.4–23.7. The issue allows an unauthenticated attacker with network access via Oracle Net to compromise the Listener, with user interaction required and potential for unaut...

CVE-2025-30735

CVE-2025-30735 affects Oracle PeopleSoft Enterprise CC Common Application Objects, component: Page and Field Configuration, version 9.2. The vulnerability exists when exposed over HTTP via a network, allowing a low-privileged attacker to perform unauthorized create, delete, or modify actions on c...