CVE-2025-31905

creationtimestamp| type| source ---|---|--- 2025-04-03 15:07:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llw6jwb3552z 2025-04-03 17:44:46+00:00| seen| https://t.me/cvedetector/21988...

Security Bulletin: Vulnerable Version Of Software In Use for watsonx Code Assistant On Prem product

Summary Watsonx Code Assistant On Prem product uses version of Python which has a known vulnerability Vulnerability Details CVEID:CVE-2024-0450 DESCRIPTION: Python CPython is vulnerable to a denial of service, caused by improper input validation by the zipfile module. By persuading a victim to op...

BIT-DOLIBARR-2021-3991 Improper Authorization in dolibarr/dolibarr

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions...

CVE-2025-21997

In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xpcreateandassignumem Since the i and pool-chunksize variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: python-jinja2 security update

An update for python-jinja2 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2024-53868

creationtimestamp| type| source ---|---|--- 2025-04-03 09:34:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10193 2025-04-03 11:12:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvrfdj26t2k 2025-04-03 13:07:31+00:00| seen|...

CVE-2025-22004

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lecsend The -send operation frees skb so save the length before calling -send to avoid a use after free...

BELL-CVE-2025-21992

Bulletin has no description...

GHSA-35JH-R3H4-6JHM

creationtimestamp| type| source ---|---|--- 2025-04-03 02:06:20+00:00| seen| https://gist.github.com/shmil111/0a44cfb066f7a8de2e03f671c12f585f 2025-04-03 05:09:00+00:00| seen| https://gist.github.com/shmil111/fb79705b111af53d22c7d3bdcbd34051 2026-03-31 21:01:11+00:00| seen|...

Exploit for CVE-2025-31864

CVE-2025-31864 1️⃣ Component type WordPress plugin 2️...

PT-2025-14706 · Tribulant · Snow Storm

Name of the Vulnerable Software and Affected Versions: Tribulant Software Snow Storm versions 1.4.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

Ubuntu: Security Advisory (USN-7406-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuperSonic security vulnerabilities

SuperSonic is an AI+BI platform open-sourced by Tencent Music Entertainment. A security vulnerability exists in SuperSonic 0.9.8 and earlier versions, which stems from a code injection issue in the H2 database connection handling component...

Fedora: Security Advisory (FEDORA-2025-dbeb2c60c3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

📄 Tomcat Partial PUT Java Deserialization

This Metasploit module exploits a Java deserialization vulnerability in Apache Tomcats session restoration functionality that can be exploited with a partial HTTP PUT request to place an attacker controlled deserialization payload in the tomcatrootdir/webapps/ROOT/ directory. For the exploit to...

CVE-2025-2704

OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase...

Security Bulletin: IBM Content Navigator is vulnerable to cross-site scripting

Summary IBM Content Navigator has addressed the following vulnerability. Vulnerability Details CVEID:CVE-2024-56341 DESCRIPTION: IBM Content Navigator is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...

CVE-2025-31282

creationtimestamp| type| source ---|---|--- 2025-04-02 18:07:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114269699138429358 2025-04-02 18:07:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114269699138429358 2025-04-02 19:07:16+00:00| seen|...