CVE-2025-30693

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

WordPress Download Manager plugin <= 3.3.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by siavashvafshar in WordPress Plugin Download Manager versions = 3.3.12...

CVE-2025-25234

creationtimestamp| type| source ---|---|--- 2025-04-17 18:49:50+00:00| seen| https://t.me/cvedetector/23237 2025-04-19 14:05:28+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3ln6ckbooo225...

CVE-2025-22086

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5pollone curqp update flow When curqp isn't NULL, in order to avoid fetching the QP from the radix tree again we check if the next cqe QP is identical to the one we already have. The bug however is that we are...

CVE-2025-23132

In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix to avoid warning in dquotwritebackdquots F2FS-fs dm-59: checkpoint=enable has some unwritten data. ------------ cut here ------------ WARNING: CPU: 6 PID: 8013 at fs/quota/dquot.c:691...

CVE-2025-39587

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325588630584 2025-04-17 18:24:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3dq6jd2d...

CVE-2025-39550

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:51+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325460507591 2025-04-17 18:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3cimoa2h...

CVE-2025-24737 WordPress WP Helper Premium plugin <= 4.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Helper Premium: from n/a through = 4.6.1...

CVE-2025-27324 WordPress 17TRACK for WooCommerce Plugin <= 1.2.10 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 17track 17TRACK for WooCommerce 17track allows Reflected XSS.This issue affects 17TRACK for WooCommerce: from n/a through = 1.2.10...

CVE-2025-22045

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix flushtlbrange when used for zapping normal PMDs On the following path, flushtlbrange can be used for zapping normal PMD entries PMD entries that point to page tables together with the PTE entries in the pointed-to pag...

CVE-2025-29651

creationtimestamp| type| source ---|---|--- 2025-04-17 14:49:00+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114353854202263361 2025-04-24 00:05:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13162...

CVE-2025-26478

creationtimestamp| type| source ---|---|--- 2025-04-17 12:00:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12206 2025-04-17 14:49:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmze2j3ibf2j 2025-04-17 17:09:32+00:00| seen| https://t.me/cvedetector/23229 2025-08-09...

CVE-2025-22088

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdmaacceptnewconn After the erdmacepputnewcep being called, newcep will be freed, and the following dereference will cause a UAF problem. Fix this issue...

CVE-2025-22115

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block group refcount race in btrfscreatependingblockgroups Block group creation is done in two phases, which results in a slightly unintuitive property: a block group can be allocated/deallocated from after...

CVE-2025-22081

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the "off + sizeofstruct NTFSDE" addition can have an integer wrapping issue. Fix it by using sizeadd...

CVE-2025-22058

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

CVE-2025-22032

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix kernel panic due to null pointer dereference Address a kernel panic caused by a null pointer dereference in the mt792xrxgetwcid function. The issue arises because the deflink structure is not properly...

CVE-2024-58093

In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstream function removal Before 456d8aa37d0f "PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free", we would free the ASPM link only after the last function on the b...

CVE-2025-1523

creationtimestamp| type| source ---|---|--- 2025-04-17 06:48:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmyj7hk4ms2h 2025-04-17 06:57:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12196 2025-04-17 10:28:12+00:00| seen| https://t.me/cvedetector/23218...

CVE-2024-13925

creationtimestamp| type| source ---|---|--- 2025-04-17 06:48:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmyj7ha6oi2c 2025-04-17 06:57:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12197 2025-04-17 10:28:11+00:00| seen| https://t.me/cvedetector/23217...