CVE-2025-22871

creationtimestamp| type| source ---|---|--- 2025-04-01 16:54:39+00:00| seen| https://bsky.app/profile/golang.org/post/3llrdm6ttcs2i 2025-04-01 19:34:15+00:00| seen| https://bsky.app/profile/go-perf.dev/post/3llrmjmcles2e 2025-04-02 02:14:38+00:00| seen|...

CVE-2025-21914

In the Linux kernel, the following vulnerability has been resolved: slimbus: messaging: Free transaction ID in delayed interrupt scenario In case of interrupt delay for any reason, slimdotransfer returns timeout error but the transaction ID TID is not freed. This results into invalid memory acces...

WordPress WPoperation Elementor Addons plugin 1.1.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin WPoperation Elementor Addons versions = 1.1.9...

WordPress Follow Us Badges plugin <= 3.1.11 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Follow Us Badges versions = 3.1.11...

CVE-2025-31904

CVE-2025-31904 refers to a CSRF to stored XSS issue in the Ebook Downloader WordPress plugin (Infoway) affecting versions up to 1.0. The vulnerability, as described, requires an authenticated user and can result in stored cross-site scripting. Related connected documents confirm a similar CSRF-to...

CVE-2025-31838 WordPress Eventbee RSVP Widget plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eventbee Eventbee RSVP Widget eventbee-rsvp-widget allows DOM-Based XSS.This issue affects Eventbee RSVP Widget: from n/a through = 1.0...

CVE-2025-31778 WordPress Donate Me Plugin <= 1.2.5 - Stored Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in raphaelheide Donate Me donate-me allows Reflected XSS.This issue affects Donate Me: from n/a through = 1.2.5...

CVE-2025-31776 WordPress Uptime Robot Plugin <= 2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aphotrax Uptime Robot Plugin for WordPress allows Cross Site Request Forgery. This issue affects Uptime Robot Plugin for WordPress: from n/a through 2.3...

CVE-2025-31776

Technical details about CVE-2025-31776 are not provided in the supplied documents. No specifics on affected versions, impact, or remediation are included; monitor for updates.

RHSA-2025:3467

creationtimestamp| type| source ---|---|--- 2025-04-01 13:32:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9892...

CVE-2025-3035

creationtimestamp| type| source ---|---|--- 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839...

WordPress Fonts Manager | Custom Fonts plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Fonts Manager | Custom Fonts versions = 1.2...

CVE-2024-13553

creationtimestamp| type| source ---|---|--- 2025-04-01 11:34:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9873 2025-04-01 12:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llqvfffeth2v 2025-04-01 13:48:33+00:00| seen|...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to next-12.3.4.tgz CVE-2024-51479

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to next-12.3.4.tgz CVE-2024-51479. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-51479 DESCRIPTION: Next.js is a React framework for building full-stack web...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to jinja2-3.1.4-py3-none-any.whl CVE-2024-56201

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to jinja2-3.1.4-py3-none-any.whl CVE-2024-56201. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-56326 DESCRIPTION: Jinja is an extensible templating engine. Prio...

CVE-2023-53027

REJECTED CVE In the Linux kernel, the following vulnerability has been resolved: erofs: fix kvcalloc misuse with GFPNOFAIL As reported by syzbot 1, kvcalloc cannot work with GFPNOFAIL. Let's use kcalloc instead...

Security Bulletin: Denial of service vulnerability in IBM WebSphere Application Server Liberty may affect IBM Storage Protect Operations Center (CVE-2024-40094).

Summary IBM Storage Protect Operations Center may be affected by denial of service caused by failure to consider ExecutableNormalizedFields in Open-source GraphQL Java library used by IBM WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2024-40094 DESCRIPTION: GraphQL Java ak...

CVE-2025-24190

creationtimestamp| type| source ---|---|--- 2025-04-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-192/ 2026-04-02 22:14:12+00:00| seen| Telegram/rgUMiA5BiDEUoxRBbKGjRmrNvY5v49pyhjoufWmWJx2GI 2026-04-02 22:14:28+00:00| seen|...

Important: php8.3

Issue Overview: NOTE: https://github.com/php/php-src/security/advisories/GHSA-rwp7-7vc6-8477 https://www.tenable.com/cve/CVE-2024-11235 Version This vulnerability is present only in PHP 8.3+. The PHP 8.2 and versions before are not impacted. CVE-2024-11235 Header parser of http stream wrapper doe...

CVE-2003-20001

The Mitel ICP VoIP 3100 device is vulnerable to a system error that discloses sensitive call information. When a remote user attempts to log in via TELNET and an external call arrives during the login wait time, the system incorrectly reveals the service type, extension number, and other SMDR rec...