CVE-2025-32480

Cross-Site Request Forgery CSRF vulnerability in dalziel Windows Live Writer windows-live-writer allows Stored XSS.This issue affects Windows Live Writer: from n/a through = 0.1...

CVE-2025-32556 WordPress Simple Post Meta Manager Plugin <= 1.0.9 - CSRF to Reflected Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sandor Kovacs Simple Post Meta Manager simple-post-meta-manager allows Reflected XSS.This issue affects Simple Post Meta Manager: from n/a through = 1.0.9...

CVE-2025-32016 Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs

Microsoft Identity Web is a library which contains a set of reusable classes used in conjunction with ASP.NET Core for integrating with the Microsoft identity platform formerly Azure AD v2.0 endpoint and AAD B2C. This vulnerability affects confidential client applications, including daemons, web...

Bykea: IDOR on in-app hardcoded zombie endpoint

The researcher discovered an Insecure Direct Object Reference IDOR vulnerability in a hardcoded legacy zombie endpoint that was no longer actively used but remained accessible. By reverse engineering the Android app and reviewing the code for unused endpoints, the sensitive details related to...

CVE-2025-30678

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-236/ 2025-06-20 13:43:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18956...

SUSE CVE-2025-3408

A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stbdupreplace. The manipulation leads to integer overflow. The attack may be launched remotely. Continious delivery with rolling releases is used by this product...

Convert Forms, 4.4.10, XSS (Cross Site Scripting)

New 5.0 Update details: All XSS and SQL reported issues have been fixed in the latest release 5.0 Update URL: https://www.tassos.gr/releases/convert-forms/convert-forms-5-0-0 Changelog URL: https://www.tassos.gr/releases/convert-forms/convert-forms-5-0-0...

Microsoft Word 2016 Multiple Vulnerabilities (KB5002702)

This host is missing an important security update according to Microsoft KB5002702 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2024-29100

creationtimestamp| type| source ---|---|--- 2025-04-08 21:40:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmdgtedihs2o...

CVE-2024-52974

creationtimestamp| type| source ---|---|--- 2025-04-08 19:51:41+00:00| seen| https://t.me/cvedetector/22489 2025-04-09 23:08:40+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lmg4abras22i...

CVE-2025-27078

creationtimestamp| type| source ---|---|--- 2025-04-08 19:22:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmd755jc5t24...

CVE-2025-29820 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2025-99147

creationtimestamp| type| source ---|---|--- 2025-04-08 16:39:40+00:00| seen| https://bsky.app/profile/s0s.sh/post/3lmcvzwdffs24...

CVE-2025-29808

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 17:46:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10967...

CVE-2025-26644

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-06-16 17:43:13+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3lrqjqzp2bi2x...

CVE-2025-27491

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-09 07:18:23+00:00| seen| https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb 2025-04-10 11:32:21+00:00| seen|...

CVE-2025-29801

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 17:46:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10970...

CVE-2025-26678

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 19:47:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10990 2025-04-08 19:48:37+00:00| seen|...

Exploit for Authentication Bypass by Primary Weakness in Crushftp

CVE-2025-31161 Proof of Concept for CVE-2025-31161 / CVE-2025-...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Business Developer

Summary There are multiple vulnerabilities in IBM® SDK Java™ used by Rational Business Developer. Rational Business Developer has provided fixes for the applicable CVEs. These issues were disclosed as part of the IBM Java SDK and Runtime Environment updates in the Oracle October 2024 Critical Pat...