CVE-2025-2325

creationtimestamp| type| source ---|---|--- 2025-03-15 06:46:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7673 2025-03-15 08:00:21+00:00| seen| Telegram/NiCFwj7Qhc8OdoqSEEjvvfBSE4ySFWE7o6SlOUKd9enu1o 2025-03-15 09:26:13+00:00| seen| https://t.me/cvedetector/20361...

CVE-2025-29771 HtmlSanitizer vulnerable to XSS when used with contentEditable

HtmlSanitizer is a client-side HTML Sanitizer. Versions prior to 2.0.3 have a cross-site scripting vulnerability when the sanitizer is used with a contentEditable element to set the elements innerHTML to a sanitized string produced by the package. If the code is particularly crafted to abuse the...

BELL-CVE-2024-8176

Bulletin has no description...

CVE-2025-27606 Element Android PIN autologout bypass

Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain circumstances, fail to logout the user if they input the wrong PIN more than the configured amount of times. An attacker with physical access to a device can exploit this to...

CVE-2023-52927 netfilter: allow exp not to be removed in nf_ct_find_expectation

In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nfctfindexpectation Currently nfconntrackin calling nfctfindexpectation will remove the exp from the hash table. However, in some scenario, we expect the exp not to be removed when the...

CVE-2025-27594

creationtimestamp| type| source ---|---|--- 2025-03-14 13:47:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7551 2025-03-14 13:48:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114161097329932334 2025-03-14 16:42:42+00:00| seen|...

CVE-2025-2000

A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation when deserialising QPY formats 13. A python process calling Qiskit 0.18.0 through 1.4.1's qiskit.qpy.load function could potentially execute any arbitrary Python code embedded ...

CVE-2024-8176

CVE-2024-8176 describes a stack overflow in the libexpat XML parser caused by recursive entity expansion on deeply nested XML references. This can lead to DoS and, in some environments, memory corruption. Public details in the provided documents confirm affected component (libexpat) and the root ...

CVE-2024-13913

creationtimestamp| type| source ---|---|--- 2025-03-14 05:46:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7530 2025-03-14 07:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114159682393652236 2025-03-14 08:20:44+00:00| seen| https://t.me/cvedetector/20265...

CVE-2025-1528 Search and filter pro <= 2.5.19 - Missing Authorization to Authenticated (Subscriber+) Post Meta Exposure

The Search & Filter Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getmetavalues' function in all versions up to, and including, 2.5.19. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2025-26163

CM Soluces Informatica Ltda Auto Atendimento 1.x.x was discovered to contain a SQL injection via the CPF parameter...

CVE-2025-26312

SendQuick Entera devices before 11HF5 are vulnerable to CAPTCHA bypass by removing the Captcha parameter...

CVE-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...

CVE-2025-2013

Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2024-29409

creationtimestamp| type| source ---|---|--- 2025-03-13 20:08:52+00:00| seen| https://gist.github.com/aydinnyunus/801342361584d1491c67a820a714f53f 2025-03-14 20:46:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5xwx342k 2025-03-14 20:53:51+00:00| seen|...

CVE-2025-22369

The ReadFile endpoint of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to read arbitrary files from the underlying OS...

CVE-2025-29997

creationtimestamp| type| source ---|---|--- 2025-03-13 13:08:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114155279058410374 2025-03-13 13:31:52+00:00| seen| Telegram/xe2ey9QZy3C60YFmNe9CqutDcHb7CC1cr5CKlx9gtbgm3M 2025-03-13 15:37:06+00:00| seen| https://t.me/cvedetector/20212...

CVE-2025-29998 No Rate Limiting Vulnerability in CAP back office application

This vulnerability exists in the CAP back office application due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoint which could lead to the OTP...

Moderate: Red Hat Security Advisory: krb5 security update

An update for krb5 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2025-21860

In the Linux kernel, the following vulnerability has been resolved: mm/zswap: fix inconsistency when zswapstorepage fails Commit b7c0ccdfbafd "mm: zswap: support large folios in zswapstore" skips charging any zswap entries when it failed to zswap the entire folio. However, when some base pages ar...