CVE-2025-32827

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01...

WordPress Ocean Extra plugin <= 2.4.6 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by stealthcopter in WordPress Plugin Ocean Extra versions = 2.4.6...

PT-2025-17908

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A security issue was discovered that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed...

📄 Microsoft Windows 11 Kernel Privilege Escalation

Microsoft Windows 11 suffers from a privilege escalation vulnerability. Exploit Title: Microsoft Windows 11 - Kernel Privilege Escalation Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Tested on: Win,...

Moderate: bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts AlmaLinux, and pcmcia configuration files. Security Fixes: BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution...

Men Salon Management System /admin/edit-customer-detailed.php File SQL Injection Vulnerability

Men Salon Management System a men's salon management system. The Men Salon Management System suffers from a SQL injection vulnerability that originates from insufficient input validation of the editid parameter in the /admin/edit-customer-detailed.php file. An attacker can use this vulnerability ...

CVE-2025-28026

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi...

PT-2025-17915

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw was found in the software, where insufficient capability checks allowed a user enrolled in a course to access certain details of other users they did not have permission to access, such...

Moodle security vulnerabilities

Moodle is a free e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from a security vulnerability that stems from the need for additional checks to ensure that users only have access to authorized grou...

CVE-2025-3843

creationtimestamp| type| source ---|---|--- 2025-04-21 23:02:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12770 2025-04-21 23:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnebll7pge2c 2025-04-22 02:30:56+00:00| seen|...

CVE-2025-32955

creationtimestamp| type| source ---|---|--- 2025-04-21 21:02:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12760 2025-04-21 23:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lneblkxtth2l 2025-04-22 00:00:22+00:00| seen|...

WordPress AFI plugin < 1.100.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Advanced Form Integration versions 1.100.0...

CVE-2025-29446

creationtimestamp| type| source ---|---|--- 2025-04-21 18:02:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12722 2025-04-21 19:49:36+00:00| seen| https://t.me/cvedetector/23451 2025-04-21 20:59:10+00:00| seen|...

CVE-2025-3854

creationtimestamp| type| source ---|---|--- 2025-04-21 14:27:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114376417527828395 2025-04-22 01:02:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12775 2025-04-22 03:04:30+00:00| seen|...

CGA-MC3P-9H59-255F

Bulletin has no description...

CVE-2025-43903

A flaw was found in Poppler. For signatures with non-empty encapsulated content, typically adbe.pkcs7.sha1, it would only compare hash values, and SignatureValue was never checked within SignerInfo. This issue could lead to signature forgeries...

CVE-2025-30691

creationtimestamp| type| source ---|---|--- 2025-04-19 00:59:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12552 2025-05-10 17:41:14+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lotiff2hm22y 2025-05-11 02:21:13+00:00| seen|...

PT-2025-17360 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue is related to a Cross-Site Request Forgery CSRF in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices worldwide or...

CGA-HP76-8J4P-G79R

Bulletin has no description...

CVE-2025-28233

creationtimestamp| type| source ---|---|--- 2025-04-18 17:59:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12513 2025-04-18 19:39:38+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk5gt4lk2 2025-04-18...