CVE-2025-29924 XWiki uses the wrong wiki reference in AuthorizationManager

XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, it's possible for an user to get access to private information through the REST API - but could also be through another API - when a sub wiki is using "Prevent unregistered users to view pages". The...

CVE-2025-29783

A flaw was found in vLLM. In deployments where vLLM is configured to use Mooncake to distribute KV across hosts, this vulnerability allows remote code execution via unsafe deserialization exposed directly over ZMQ/TCP on all network interfaces. Mitigation A possible mitigation would be making...

CVE-2015-2743

creationtimestamp| type| source ---|---|--- 2025-03-19 13:54:17+00:00| seen| https://gist.github.com/makeforfun/85ab01bc29a9bdc9bd019a3e320a3f94 2026-08-05 15:26:51+00:00| seen| https://gist.github.com/vseredi/153fca0b63bab02237be36c7c5e29109...

CVE-2024-13442

creationtimestamp| type| source ---|---|--- 2025-03-19 12:40:14+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkq7ddnhzo2v 2025-03-19 13:49:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8044 2025-03-19 14:38:31+00:00| seen|...

CVE-2024-53568

creationtimestamp| type| source ---|---|--- 2025-03-19 04:22:18+00:00| seen| https://bsky.app/profile/opsmatters.bsky.social/post/3lkpdixzwno2e 2025-04-22 21:09:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngln4cggq2h 2025-04-22 22:35:17+00:00| seen|...

CVE-2025-29401

creationtimestamp| type| source ---|---|--- 2025-03-19 02:18:11+00:00| seen| https://gist.github.com/bGl1o/f946e99e94f3b563c9b9b5c095da660a 2025-03-19 18:43:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqtnaz3gr2s 2025-03-19 18:49:27+00:00| seen| https://t.me/cvedetector/2065...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RockyLinux 9 : doxygen (RLSA-2025:1329)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:1329 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly...

CVE-2025-27688

creationtimestamp| type| source ---|---|--- 2025-03-18 17:44:03+00:00| seen| https://t.me/cvedetector/20571 2025-03-18 18:00:21+00:00| seen| Telegram/ZmfziCHx2cuj0taxRvbC9hjPhDUM9ZhE0x1NEedA7HOlQU 2025-03-18 20:18:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihyv6cs2e...

CVE-2025-1468

creationtimestamp| type| source ---|---|--- 2025-03-18 13:01:22+00:00| seen| Telegram/6cbUuW0XOy9-5cfzVYZy-1D70VP0VBBmnHLM6kTk1XKO28 2025-03-18 13:21:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114183639798780722 2025-03-18 13:33:35+00:00| seen| https://t.me/cvedetector/20563...

CVE-2025-2493

creationtimestamp| type| source ---|---|--- 2025-03-18 11:55:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7903 2025-03-18 13:01:22+00:00| seen| Telegram/6cbUuW0XOy9-5cfzVYZy-1D70VP0VBBmnHLM6kTk1XKO28 2025-03-18 16:03:53+00:00| seen| https://t.me/cvedetector/20568 2025-03-18 16:13:23+00:0...

CVE-2025-2495

creationtimestamp| type| source ---|---|--- 2025-03-18 11:55:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7900 2025-03-18 16:03:51+00:00| seen| https://t.me/cvedetector/20566 2025-03-18 16:13:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lko2rjse7a2w...

CVE-2025-29909

creationtimestamp| type| source ---|---|--- 2025-03-18 00:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114180582366575557...

CVE-2025-2471

A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. Affected is an unknown function of the file /boat-details.php. The manipulation of the argument bid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-26548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kdmurray Random Image Selector random-image-selector allows Reflected XSS.This issue affects Random Image Selector: from n/a through = 2.4...

CVE-2025-29781

The Bare Metal Operator BMO implements a Kubernetes API for managing bare metal hosts in Metal3. Baremetal Operator enables users to load Secret from arbitrary namespaces upon deployment of the namespace scoped Custom Resource BMCEventSubscription. Prior to versions 0.8.1 and 0.9.1, an adversary...

CVE-2025-29781

The connected IBM security bulletin confirms CVE-2025-29781 in Bare Metal Operator (BMO) for Kubernetes/Metal3. Before patch releases v0.9.1 and v0.8.1, a namespace-scoped attacker could cause Secret leakage by loading Secrets from unauthorized namespaces when deploying BMCEventSubscription. The ...

CVE-2025-29781 Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD

The Bare Metal Operator BMO implements a Kubernetes API for managing bare metal hosts in Metal3. Baremetal Operator enables users to load Secret from arbitrary namespaces upon deployment of the namespace scoped Custom Resource BMCEventSubscription. Prior to versions 0.8.1 and 0.9.1, an adversary...

pacemaker bug fix and enhancement update

An update is available for pacemaker. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9....

conmon bug fix and enhancement update

An update is available for conmon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...