CVE-2025-47560

creationtimestamp| type| source ---|---|--- 2025-05-16 17:35:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16732...

CVE-2025-4792

creationtimestamp| type| source ---|---|--- 2025-05-16 17:34:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16716...

CVE-2025-48136

creationtimestamp| type| source ---|---|--- 2025-05-16 16:34:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16710...

CVE-2025-48134

creationtimestamp| type| source ---|---|--- 2025-05-16 16:34:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16703...

CVE-2025-4757

creationtimestamp| type| source ---|---|--- 2025-05-16 08:33:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16662...

CVE-2025-4749

creationtimestamp| type| source ---|---|--- 2025-05-16 05:34:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16630...

CVE-2025-47930

Zulip is an open-source team chat application. Starting in version 10.0 and prior to version 10.3, the "Who can create public channels" access control mechanism can be circumvented by creating a private or web-public channel, and then changing the channel privacy to public. A similar technique...

Side Channel Analysis in Homomorphic Encryption

Homomorphic encryption provides many opportunities for privacy-aware processing, including with methods related to machine learning. Many of our existing cryptographic methods have been shown in the past to be susceptible to side channel attacks. With these, the implementation of the cryptographi...

SUSE SLES15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2025:0613-3)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0613-3 advisory. - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136. Other bugfixes: - Non approved PBKDF parameters wrongly...

CVE-2025-47930 Zulip Server has access control bypass for restrictions on creation of specific channel types

Zulip is an open-source team chat application. Starting in version 10.0 and prior to version 10.3, the "Who can create public channels" access control mechanism can be circumvented by creating a private or web-public channel, and then changing the channel privacy to public. A similar technique...

CVE-2025-47930

Zulip Server vulnerability CVE-2025-47930 affects versions 10.0–10.2, where the access control for creating certain channel types can be bypassed by creating a private or web-public channel and then changing its privacy to public (and a similar method to create private channels without permission...

CVE-2025-48050

creationtimestamp| type| source ---|---|--- 2025-05-15 16:35:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16540...

CVE-2022-42163

creationtimestamp| type| source ---|---|--- 2025-05-15 16:35:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16529...

CVE-2021-47181

creationtimestamp| type| source ---|---|--- 2025-05-15 13:33:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16503...

CVE-2022-49114

creationtimestamp| type| source ---|---|--- 2025-05-15 12:34:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16469...

SUSE CVE-2025-4574

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

SUSE-SU-2025:0613-2 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136. Other bugfixes: - Non approved PBKDF parameters wrongly resulting as approved bsc1236771...

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

...

git: The sideband payload is passed unfiltered to the terminal in git

A flaw was found in Git. When cloning, fetching, or pushing from a server, informational or error messages are transported from the remote Git process to the client via a sideband channel. These messages are prefixed with "remote:" and printed directly to the standard error output. Typically, thi...

Zulip 安全漏洞

Zulip is a powerful open-source group chat application from Zulip, Inc. for combining the immediacy of real-time chat with the productivity benefits of threaded conversations. A security vulnerability exists in Zulip versions prior to 10.0 to 10.3, which stems from a channel creation permission...