Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch

Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.This bulletin contains information regarding the vulnerability and its fixture...

Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. .This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

CVE-2025-37861

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task management thread processes reply queues while the reset thread resets them, the task management thread accesses an invalid queue ID 0xFFFF, s...

CVE-2025-37881

creationtimestamp| type| source ---|---|--- 2025-05-09 07:25:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15692 2025-05-09 08:31:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lopz7ybev42t 2025-05-09 10:21:57+00:00| seen|...

CVE-2025-37888

creationtimestamp| type| source ---|---|--- 2025-05-09 07:25:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15685 2025-05-09 08:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lopz7ypn6z24 2025-05-09 09:21:39+00:00| seen|...

CVE-2025-37882

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these events points at enqueue at the time of error occurrence on xHCI 1.1+ HCs or it's NULL on older ones. By the time we are handling the event,...

Debian: Security Advisory (DLA-4157-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-21906 · Git +1 · Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: The software is susceptible to a security exception during the cloning of an AttributeSource$State object within the ConcatenateGraphFilter$BytesRefBuilderT class. The issue occurs wh...

Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation

Exploit Title: Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation Date: 2025-05-05 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Tested on: Win x64 CVE : CVE-2024-38193 pragma once...

GitLab 12.0 < 17.9.8 / 17.10 < 17.10.6 / 17.11 < 17.11.2 (CVE-2025-1278)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2. Under certain conditions users could bypass IP access...

WordPress Depicter Plugin 3.6.1 - SQL Injection

Exploit Title: WordPress Depicter Plugin 3.6.1 - SQL Injection Google Dork: inurl:/wp-content/plugins/depicter/ Date: 2025-05-06 Exploit Author: Andrew Long datagoboom Vendor Homepage: https://wordpress.org/plugins/depicter/ Software Link: https://downloads.wordpress.org/plugin/depicter.3.6.1.zip...

CVE-2025-1331

creationtimestamp| type| source ---|---|--- 2025-05-08 22:25:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15637 2025-05-08 22:55:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114474677389527079 2025-05-08 23:14:39+00:00| seen|...

CVE-2004-0789

creationtimestamp| type| source ---|---|--- 2025-05-08 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3loosp5gwvz2m...

WordPress Drag and Drop Multiple File Upload for WooCommerce plugin <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function vulnerability

Unauthenticated Arbitrary File Upload via upload Function vulnerability discovered by Milinxee in WordPress Plugin Drag and Drop Multiple File Upload for WooCommerce versions = 1.1.6...

WordPress NEX-Forms plugin <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Function vulnerability

Authenticated Custom Limited Code Execution via gettablerecords Function vulnerability discovered by m3ssap0 in WordPress Plugin NEX-Forms versions = 8.9.1...

CVE-2024-8100

creationtimestamp| type| source ---|---|--- 2025-05-08 19:24:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15604 2025-05-08 19:42:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114473917814422357 2025-05-08 19:48:26+00:00| seen|...

CVE-2024-11186

creationtimestamp| type| source ---|---|--- 2025-05-08 19:24:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15598 2025-05-08 19:37:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114473898879191172 2025-05-08 19:48:29+00:00| seen|...

CVE-2025-4452

creationtimestamp| type| source ---|---|--- 2025-05-08 19:02:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114473759746158408 2025-05-09 02:25:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15658 2025-05-09 04:00:56+00:00| published-proof-of-concept|...

CVE-2024-13009

creationtimestamp| type| source ---|---|--- 2025-05-08 18:24:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15583 2025-05-08 19:43:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looipib42pd2 2025-05-08...

CVE-2025-26842

creationtimestamp| type| source ---|---|--- 2025-05-08 16:48:45+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loodjbrfyh22 2025-05-08 20:07:42+00:00| seen| https://t.me/cvedetector/24836...