PT-2025-16474

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated attacker can obtain a list of smart devices by knowing a valid username. Recommendations At the moment, there is no information about a newer version that contains a fix for...

PT-2025-16488

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Unauthenticated attackers can query an API endpoint and get device details. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

Growatt Cloud Applications security vulnerabilities

Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to query API endpoints and obtain device details...

Pymatgen 2024.1 - Remote Code Execution (RCE)

Exploit Title : Pymatgen 2024.1 - Remote Code Execution RCE Google Dork : not applicable Date : 2024-11-13 Exploit Author : Mohammed Idrees Banyamer Vendor Homepage : https ://pymatgen.org Software Link : https ://pypi.org /project /pymatgen/ Version : 2024.1 Tested on : Kali Linux 2024.1 CVE :...

📄 GestioIP 3.5.7 Remote Command Execution

GestioIP version 3.5.7 suffers from a remote command execution vulnerability. Exploit Title: GestioIP 3.5.7 - Remote Command Execution RCE Exploit Author: m4xth0r Maximiliano Belino Author website: https://maxibelino.github.io/ Author email max.cybersecurity at belino.com GitHub disclosure link:...

Cacti 1.2.26 - Remote Code Execution (RCE) (Authenticated)

Exploit Title: Cacti 1.2.26 - Remote Code Execution RCE Authenticated Date: 06/01/2025 Exploit Author: D3Ext Vendor Homepage: https://cacti.net/ Software Link: https://github.com/Cacti/cacti/archive/refs/tags/release/1.2.26.zip Version: 1.2.26 Tested on: Kali Linux 2024 CVE: CVE-2024-25641...

CVE-2025-27719: Authorization Bypass Through User-Controlled Key

Unauthenticated attackers can query an API endpoint and get device details...

CVE-2020-13941

creationtimestamp| type| source ---|---|--- 2025-04-14 23:00:06+00:00| published-proof-of-concept| Telegram/3Hw0ti8HK8QOqtOY2rsuqDdNwUtzE1sTstZVcrt4AbtXgI8 2025-05-04 21:02:15+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3loeqtdt36s2k 2026-10-03 23:00:18+00:00| seen|...

CVE-2025-3590

creationtimestamp| type| source ---|---|--- 2025-04-14 21:54:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11707 2025-04-14 22:39:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmsmvv72gv2u 2025-04-15 01:32:40+00:00| seen|...

CVE-2022-43840

creationtimestamp| type| source ---|---|--- 2025-04-14 20:54:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11699 2025-04-14 22:38:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmsmvtzoj62i 2025-04-15 01:32:48+00:00| seen| https://t.me/cvedetector/22894...

CVE-2025-1782

creationtimestamp| type| source ---|---|--- 2025-04-14 18:54:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11676 2025-04-14 19:46:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114338036274546789 2025-04-14 20:18:49+00:00| seen|...

CVE-2025-2424

creationtimestamp| type| source ---|---|--- 2025-04-14 16:33:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmryimatkb2r 2025-04-14 18:51:33+00:00| seen| https://t.me/cvedetector/22874...

CVE-2025-22372

creationtimestamp| type| source ---|---|--- 2025-04-14 15:53:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11640 2025-04-14 16:48:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114337336240019826 2025-04-14 18:51:20+00:00| seen| https://t.me/cvedetector/22864...

CVE-2025-27009

creationtimestamp| type| source ---|---|--- 2025-04-14 11:53:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11598 2025-04-14 12:33:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl34dhmr24 2025-04-14 13:30:26+00:00| seen|...

Security Bulletin: IBM Maximo Application Suite uses requests-2.31.0-py3-none-any.whl which is vulnerable to CVE-2024-35195.

Summary IBM Maximo Application Suite uses requests-2.31.0-py3-none-any.whl which is vulnerable to CVE-2024-35195. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-35195 DESCRIPTION: Psf Requests could allow a local authenticated...

CVE-2025-32907

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a fu...

CVE-2025-10123

creationtimestamp| type| source ---|---|--- 2025-04-14 01:24:25+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqfosumbk25 2025-04-14 02:39:47+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqjvlhwps2y 2025-04-14 02:40:39+00:00| seen|...

CVE-2012-12312

creationtimestamp| type| source ---|---|--- 2025-04-14 00:22:32+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqca5vhak2i...

CVE-2025-29720

Dify v1.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi...

Windows App Client < 2.0.365.0 RCE Vulnerability (Apr 2025) - Windows

Windows App Client is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...