CVE-2025-22033 arm64: Don't call NULL in do_compat_alignment_fixup()

In the Linux kernel, the following vulnerability has been resolved: arm64: Don't call NULL in docompatalignmentfixup doalignmentt32tohandler only fixes up alignment faults for specific instructions; it returns NULL otherwise e.g. LDREX. When that's the case, signal to the caller that it needs to...

CVE-2025-22019

In the Linux kernel, the following vulnerability has been resolved: bcachefs: bch2ioctlsubvolumedestroy fixes bch2evictsubvolumeinodes was getting stuck - due to incorrectly pruning the dcache. Also, fix missing permissions checks...

CVE-2025-39546

Cross-Site Request Forgery CSRF vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows Cross Site Request Forgery.This issue affects ElementsReady Addons for Elementor: from n/a through = 6.6.2...

CVE-2025-39524

CVE-2025-39524 is a stored XSS vulnerability in the WordPress Html5 Audio Player plugin. The issue arises from improper neutralization of script-related HTML tags in the plugin and affects Html5 Audio Player versions up to and including 2.2.28. If exploited, an attacker could inject scripted cont...

CVE-2025-3681

creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfuqyizl2j 2025-04-16 10:55:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12011 2025-04-16 12:31:18+00:00| published-proof-of-concept|...

CVE-2025-3678

creationtimestamp| type| source ---|---|--- 2025-04-16 09:55:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12003 2025-04-16 10:43:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfusfcuj2b 2025-04-16 11:30:25+00:00| published-proof-of-concept|...

CVE-2025-3675

creationtimestamp| type| source ---|---|--- 2025-04-16 07:55:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11994 2025-04-16 10:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfuri5bj2b 2025-04-16 11:51:01+00:00| seen|...

PCMan FTP Server security vulnerabilities

PCMan FTP Server is an open source lightweight FTP server software developed by PCMan . A buffer overflow vulnerability exists in PCMan FTP Server. The vulnerability stems from the STATUS Command Handler not performing proper boundary checks on input data, and no details of the vulnerability are...

Mattermost security vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost has a security vulnerability that stems from the Wrangler plugin that can bypass AI access control. No details of the vulnerability are provided at this time...

Tenda FH1202 Access Control Error Vulnerability (CNVD-2025-08788)

The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 is vulnerable to an access control error vulnerability that stems from improper access control. No detailed vulnerability details are available at this time...

Tenda FH1202 Access Control Error Vulnerability (CNVD-2025-08789)

The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 is vulnerable to an access control error vulnerability that stems from improper access control. No detailed vulnerability details are available at this time...

Drupal Simple GTM Security Vulnerability

Drupal Simple GTM is a Drupal module for the Drupal community. A security vulnerability exists in Drupal Simple GTM. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or vendor announcements...

Drupal Google Optimize security vulnerabilities

Drupal Google Optimize is an online split testing tool for the Drupal community. A security vulnerability exists in Drupal Google Optimize. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

CVE-2025-30984

creationtimestamp| type| source ---|---|--- 2025-04-15 22:44:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5o3qyk32h 2025-04-15 22:56:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11956 2025-04-16 01:48:48+00:00| seen|...

CVE-2025-30966

creationtimestamp| type| source ---|---|--- 2025-04-15 22:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5o2vidj2j 2025-04-16 01:49:05+00:00| seen| https://t.me/cvedetector/23030...

CVE-2025-32388 SvelteKit allows XSS via tracked search_params

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.20.6 , unsanitized search param names cause XSS vulnerability. You are affected if you iterate over all entries of event.url.searchParams inside a server load function. Attackers can explo...

CVE-2025-27719

Unauthenticated attackers can query an API endpoint and get device details...

CVE-2025-27719

Unauthenticated attackers can query an API endpoint and get device details...

CVE-2025-26880

CVE-2025-26880 affects SKT Skill Bar (WordPress plugin). The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation, affecting SKT Skill Bar versions up to 2.3. The issue is resolved in a patched release (2.3 or later).

CVE-2025-26919 WordPress Tainá plugin <= 0.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tainacan Tainá taina allows Stored XSS.This issue affects Tainá: from n/a through 0.2.5...