CVE-2025-29471

Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field...

CVE-2025-3589

creationtimestamp| type| source ---|---|--- 2025-04-14 21:54:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11710 2025-04-14 22:39:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmsmvvg32n2j 2025-04-15 01:32:43+00:00| seen|...

CVE-2022-43851

IBM Aspera Console 3.4.0 through 3.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-32913

A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function...

CVE-2025-3568

CVE-2025-3568 affects Webkul Krayin CRM

CVE-2025-3562

A vulnerability was found in Yonyou YonBIP MA2.7. It has been declared as problematic. Affected by this vulnerability is the function FileInputStream of the file /mobsm/common/userfile. The manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit...

CVE-2025-3548 Open Asset Import Library Assimp File types.h Set heap-based overflow

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possibl...

CVE-2025-32909

A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniffmp4 function. The HTTP server may cause the libsoup client to crash. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2025-32930

This CVE entry is rejected/not used per initial description.

CVE-2025-32426

Formie is a Craft CMS plugin for creating forms. Prior to version 2.1.44, it is possible to inject malicious code into the HTML content of an email notification, which is then rendered on the preview. There is no issue when rendering the email via normal means a delivered email. This would requir...

CVE-2025-3533

CVE-2025-3533 affects YouDianCMS 9.5.21. The vulnerability is an XSS in the file /App/Tpl/Admin/Default/Channel/index.html, caused by manipulation of the argument Parent. Exploitation may be remote; the exploit has been disclosed publicly. Connected documents consistently reference this filename/...

CVE-2025-27813

MSI Center before 2.0.52.0 has Missing PE Signature Validation...

CVE-2025-30655

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to cause a Denial-of-Service DoS. When a specific "show bgp neighbor" CLI command is run, the rpd cpu...

CVE-2025-32074

creationtimestamp| type| source ---|---|--- 2025-04-11 17:32:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114320523948394256 2025-04-11 19:43:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkroqztnd2v 2025-04-11 20:38:13+00:00| seen| https://t.me/cvedetector/227...

CVE-2025-31935

Subnet Solutions PowerSYSTEM Center is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the API may trigger an exception, resulting in a denial-of-service condition...

CVE-2025-2128

creationtimestamp| type| source ---|---|--- 2025-04-11 09:50:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11411 2025-04-11 11:37:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmjwksiysk2j 2025-04-11 13:56:40+00:00| seen| https://t.me/cvedetector/22732...

CVE-2025-31932

Deserialization of untrusted data affects BizRobo! on all versions, enabling arbitrary code execution on the Management Console when exploited. Root cause is untrusted data deserialization in the product’s components (import function and Licensing/Design Studio workflow). The vendor provides a wo...

CVE-2025-32633 WordPress Database Toolset Plugin <= 1.8.4 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in neoslab Database Toolset allows Path Traversal. This issue affects Database Toolset: from n/a through 1.8.4...

CVE-2025-32629 WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Path Traversal.This issue affects WP-BusinessDirectory: from n/a through = 3.1.2...

CVE-2025-0125 PAN-OS: Improper Neutralization of Input in the Management Web Interface

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the...