CVE-2025-25907

tianti v2.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request...

CVE-2025-2127

creationtimestamp| type| source ---|---|--- 2025-03-09 17:37:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6969 2025-03-09 19:37:20+00:00| seen| https://t.me/cvedetector/19928 2025-03-09 22:35:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljy3wokvnv2f 2025-05-12...

CVE-2024-42733

An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path input...

CVE-2023-52970

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11.4. crashes in Itemdirectviewref::derivedfieldtransformerforwhere...

CVE-2024-13825 Email Keep <= 1.1 - Reflected XSS

The Email Keep WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12460

creationtimestamp| type| source ---|---|--- 2025-03-08 02:35:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6916 2025-03-08 04:29:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljtoshv7la2n 2025-03-08 04:37:51+00:00| seen|...

CVE-2024-13835

creationtimestamp| type| source ---|---|--- 2025-03-08 02:35:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6913 2025-03-08 04:29:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljtosilano2e 2025-03-08 04:37:51+00:00| seen|...

CVE-2025-21839

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with guest value only before entering .vcpurun loop Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpurun loop to fix a bug where KVM can load hardware with a stale...

CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

CVE-2025-21835

creationtimestamp| type| source ---|---|--- 2025-03-07 12:04:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrxr4illc2f 2025-03-07 12:07:05+00:00| seen| https://bsky.app/profile/potato.software/post/3ljrxuybpw32n 2025-03-07 12:25:52+00:00| seen| https://t.me/cvedetector/19811...

CVE-2024-13668

creationtimestamp| type| source ---|---|--- 2025-03-07 10:35:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6825 2025-03-07 12:25:38+00:00| seen| https://t.me/cvedetector/19800 2025-03-07 14:05:02+00:00| seen|...

CVE-2025-21837

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-13655

creationtimestamp| type| source ---|---|--- 2025-03-07 07:37:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6804 2025-03-07 08:34:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrlz4vzhl2u 2025-03-07 09:48:54+00:00| seen|...

CVE-2024-58082

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: Fix an error check in npcmvideoeceinit When function offinddevicebynode fails, it returns NULL instead of an error code. So the corresponding error check logic should be modified to check whether the return value ...

CVE-2024-58083

In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvmgetvcpu Explicitly verify the target vCPU is fully online prior to clamping the index in kvmgetvcpu. If the index is "bad", the nospec clamping will generate '0', i.e. KVM will...

CVE-2024-58086

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroyed If the active performance monitor v3d-activeperfmon is being destroyed, stop it first. Currently, the active perfmon is not stopped during destruction, leaving the...

CVE-2025-21833

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARNONONCE There is a WARNONONCE to catch an unlikely situation when domainremovedevpasid can't find the pasid. In case it nevertheless happens we must avoid using a NULL pointer...

CVE-2024-58061

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prohibit deactivating all links In the internal API this calls this is a WARNON, but that should remain since internally we want to know about bugs that may cause this. Prevent deactivating all links in the debugf...

CVE-2024-58086

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroyed If the active performance monitor v3d-activeperfmon is being destroyed, stop it first. Currently, the active perfmon is not stopped during destruction, leaving the...

CVE-2025-21834 seccomp: passthrough uretprobe systemcall without filtering

In the Linux kernel, the following vulnerability has been resolved: seccomp: passthrough uretprobe systemcall without filtering When attaching uretprobes to processes running inside docker, the attached process is segfaulted when encountering the retprobe. The reason is that now that uretprobe is...