CVE-2025-32946 PeerTube Arbitrary Playlist Creation via ActivityPub Protocol

This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulnerable code sets the owner of the new playlist to be the user who performed the request, and then sets the associated channel to the channel ID supplied by the request,...

CVE-2025-32946 PeerTube Arbitrary Playlist Creation via ActivityPub Protocol

This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulnerable code sets the owner of the new playlist to be the user who performed the request, and then sets the associated channel to the channel ID supplied by the request,...

CVE-2025-32945 PeerTube Arbitrary Playlist Creation via REST API

The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code sets the owner of the new playlist to be the user who performed the request, and then sets the associated channel to the channel ID supplied by the request,...

CVE-2025-32945

PeerTube CVE-2025-32945: A REST API flaw allows an authenticated user to add playlists to another user’s channel. The code creates the playlist with the requester as owner and sets the channel to the supplied ID without verifying ownership, enabling cross-user playlist creation. CVSS v3.1 base sc...

GHSA-M3CQ-XCX9-3GVM

creationtimestamp| type| source ---|---|--- 2025-04-15 03:54:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11748...

CVE-2022-46569

creationtimestamp| type| source ---|---|--- 2025-04-15 03:54:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11742...

CVE-2022-46568

creationtimestamp| type| source ---|---|--- 2025-04-15 03:54:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11740...

Making Acoustic Side-Channel Attacks on Noisy Keyboards Viable with LLM-Assisted Spectrograms' "Typo" Correction

The large integration of microphones into devices increases the opportunities for Acoustic Side-Channel Attacks ASCAs, as these can be used to capture keystrokes' audio signals that might reveal sensitive information. However, the current State-Of-The-Art SOTA models for ASCAs, including...

Stable Channel Update for Desktop

The Stable channel has been updated to 135.0.7049.95/.96 for Windows, Mac and 135.0.7049.95 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

CVE-2025-24797 Meshtastic incorrectly hands malformed packets leads to controlled buffer overflow

Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remote code execution. This attack does not...

CVE-2020-27792

creationtimestamp| type| source ---|---|--- 2025-04-14 21:54:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11708...

GHSA-394C-RR7Q-6G78

creationtimestamp| type| source ---|---|--- 2025-04-14 18:54:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11685...

CVE-2025-3533

A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21. This issue affects some unknown processing of the file /App/Tpl/Admin/Default/Channel/index.html.Attackers. The manipulation of the argument Parent leads to cross site scripting. The attack may be initiated...

CVE-2025-3533: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21. This issue affects some unknown processing of the file /App/Tpl/Admin/Default/Channel/index.html.Attackers. The manipulation of the argument Parent leads to cross site scripting. The attack may be initiated...

CVE-2022-46580

creationtimestamp| type| source ---|---|--- 2025-04-11 22:51:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11496...

GHSA-C5HG-MR8R-F6JP

creationtimestamp| type| source ---|---|--- 2025-04-11 22:51:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11493...

CVE-2020-36567

creationtimestamp| type| source ---|---|--- 2025-04-11 17:51:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11486...

CVE-2022-46596

creationtimestamp| type| source ---|---|--- 2025-04-11 16:51:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11460...

CVE-2017-20154

creationtimestamp| type| source ---|---|--- 2025-04-11 14:51:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11429...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1369)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...