CVE-2025-30698

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21.0.6, 24; Oracle...

CVE-2025-27719 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

Unauthenticated attackers can query an API endpoint and get device details...

CVE-2025-27719 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

Unauthenticated attackers can query an API endpoint and get device details...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2025-30730

...

CVE-2025-30731

...

CVE-2025-30718

...

CVE-2025-30712

...

CVE-2025-30709

...

CVE-2025-30703

CVE-2025-30703 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. Root cause details are not explicitly stated in the provided documents, but the issue enables a high-privilege attacker with network access via multiple protocols to perform unau...

CVE-2025-30691

CVE-2025-30691 affects Oracle Java SE (Compiler) and Oracle GraalVM for JDK, with affected Oracle Java SE versions 21.0.6 and 24 and GraalVM JDK 21.0.6 and 24. The issue can be exploited remotely over network via multiple protocols and through APIs that supply data to the APIs; successful attacks...

CVE-2025-30684

CVE-2025-30684 refers to a vulnerability in the MySQL Server product from Oracle, specifically in the component: Server: Replication. Affected versions are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. The documented impact is that a highly privileged attacker with network access via multiple protoc...

CVE-2025-21586

...

CVE-2025-32778 Web-Check allows command Injection via Unvalidated URL in Screenshot API

Web-Check is an all-in-one OSINT tool for analyzing any website. A command injection vulnerability exists in the screenshot API of the Web Check project Lissy93/web-check. The issue stems from user-controlled input url being passed unsanitized into a shell command using exec, allowing attackers t...

Exploit for CVE-2025-2294

🚨 Kubio AI Page Builder = 2.5.1 - Unauthenticated Local File...

CVE-2025-28100

creationtimestamp| type| source ---|---|--- 2025-04-15 17:55:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11871 2025-04-15 18:44:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmuqal4bdg2q 2025-04-15 21:37:49+00:00| seen|...

GHSA-9V34-FRGQ-63MV

creationtimestamp| type| source ---|---|--- 2025-04-15 17:04:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114343062669368490...

CVE-2025-32945

creationtimestamp| type| source ---|---|--- 2025-04-15 14:15:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114342397806384726 2025-04-15 16:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmujasjh7k24 2025-04-15 17:26:34+00:00| seen| https://t.me/cvedetector/229...

CVE-2025-32445

A flaw was found in the argo-events package. A user with the permission to create/modify EventSource and Sensor custom resources can gain privileged access to the host system and cluster, even without having direct administrative privileges...

CVE-2025-26944

creationtimestamp| type| source ---|---|--- 2025-04-15 12:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmu3tdocro2q 2025-04-15 12:54:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11796 2025-04-15 15:46:19+00:00| seen|...