CVE-2025-28237

creationtimestamp| type| source ---|---|--- 2025-04-18 17:59:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12512 2025-04-18 19:34:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk6qfyek2 2025-04-18...

CVE-2025-28355

creationtimestamp| type| source ---|---|--- 2025-04-18 17:00:10+00:00| published-proof-of-concept| Telegram/025r9Ac4mA6AzmYH4V5jxzygPRuLIkjd6NMrYR-gf6fiv4 2025-04-18 18:58:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12522 2025-04-18 19:35:23+00:00| seen|...

CVE-2025-31120

creationtimestamp| type| source ---|---|--- 2025-04-18 16:59:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12504 2025-04-18 17:32:17+00:00| seen| https://bsky.app/profile/Minecraft.activitypub.awakari.com.ap.brid.gy/post/3ln45mklycpf2 2025-04-18 19:05:05+00:00| seen|...

CVE-2025-32795

Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY where normal users are improperly granted permissions to edit APP names, descriptions and icons. This access control flaw allows non-admin users to modify app details, despite...

CVE-2025-37860

In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100processdesignparam Since cited commit, ef100probemain and hence also ef100checkdesignparams run before efx-netdev is created; consequently, we cannot netifsettsomaxsize or segs at this point. Mo...

CVE-2025-39755

creationtimestamp| type| source ---|---|--- 2025-04-18 07:59:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12398 2025-04-18 09:13:28+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3bqmkmues2...

CVE-2025-40014

In the Linux kernel, the following vulnerability has been resolved: objtool, spi: amd: Fix out-of-bounds stack access in amdsetspifreq If speedhz AMDSPIMINHZ, amdsetspifreq iterates over the entire amdspifreq array without breaking out early, causing 'i' to go beyond the array bounds. Fix that by...

CVE-2025-3730

A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function torch.nn.functional.ctcloss of the file aten/src/ATen/native/LossCTC.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed ...

CVE-2025-22119

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: init wiphywork before allocating rfkill fails syzbort reported a uninitialize wiphyworklock in cfg80211devfree. 1 After rfkill allocation fails, the wiphy release process will be performed, which will cause...

CVE-2025-22037

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in allocpreauthhash The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup even thought conn-preauthinfo is not...

CVE-2025-22117

In the Linux kernel, the following vulnerability has been resolved: ice: fix using untrusted value of pktlen in icevcfdirparseraw Fix using the untrusted value of proto-raw.pktlen in function icevcfdirparseraw by verifying if it does not exceed the VIRTCHNLMAXSIZERAWPACKET value...

CVE-2025-22078

In the Linux kernel, the following vulnerability has been resolved: staging: vchiqarm: Fix possible NPR of keep-alive thread In case vchiqplatformconnstatechanged is never called or fails before driver removal, kathread won't be a valid pointer to a taskstruct. So do the necessary checks before...

CVE-2025-3785

creationtimestamp| type| source ---|---|--- 2025-04-18 02:37:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114356638723386779 2025-04-18 08:59:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12408 2025-04-18 11:30:43+00:00| published-proof-of-concept|...

CGA-GCP4-XG32-PMH6

Bulletin has no description...

CVE-2024-42178

HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution...

Tenda FH1202 Access Control Error Vulnerability

The Tenda FH1202 is a wireless router from Tenda. An access control error vulnerability exists in the Tenda FH1202. The vulnerability stems from mishandling of access control in the web management interface code of the /goform/VirSerDMZ component. No detailed vulnerability details are provided at...

CVE-2025-32795: Improper Access Control

Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY where normal users are improperly granted permissions to edit APP names, descriptions and icons. This access control flaw allows non-admin users to modify app details, despite...

SUSE: Security Advisory (SUSE-SU-2025:1325-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-27719

Unauthenticated attackers can query an API endpoint and get device details...

CVE-2025-29316

creationtimestamp| type| source ---|---|--- 2025-04-17 22:53:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pomef2v 2025-04-17 23:01:03+00:00| seen| https://t.me/cvedetector/23266...