CVE-2025-1653

creationtimestamp| type| source ---|---|--- 2025-03-15 02:45:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7649 2025-03-15 03:48:54+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114164402333040053 2025-03-15 04:00:45+00:00| seen|...

PT-2025-11318

Name of the Vulnerable Software and Affected Versions: School Management System – WPSchoolPress plugin for WordPress versions up to, and including, 2.2.16 Description: The issue is related to a missing capability check on the wpsp UpdateTeacher function, allowing authenticated attackers with...

RHEL 8 : firefox (RHSA-2025:2708)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:2708 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

RHEL 9 : kernel (RHSA-2025:2475)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2475 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: core: zero-initialize the...

CVE-2024-12020

creationtimestamp| type| source ---|---|--- 2025-03-14 20:46:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5xsxod2l 2025-03-14 20:53:50+00:00| seen| https://t.me/cvedetector/20338...

CVE-2024-12245

creationtimestamp| type| source ---|---|--- 2025-03-14 20:46:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5xivf62n 2025-03-14 20:53:52+00:00| seen| https://t.me/cvedetector/20341 2025-03-18 17:48:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7...

GHSA-52JP-HRPF-2JFF

creationtimestamp| type| source ---|---|--- 2025-03-14 18:23:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pp6o62d 2025-03-30 06:32:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9544...

CVE-2025-29780

creationtimestamp| type| source ---|---|--- 2025-03-14 18:11:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114162131093338024 2025-03-14 20:53:39+00:00| seen| https://t.me/cvedetector/20331...

CVE-2024-47573

creationtimestamp| type| source ---|---|--- 2025-03-14 16:42:22+00:00| seen| https://t.me/cvedetector/20292 2025-03-14 16:46:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qhdnux2x 2025-03-14 18:04:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/1141621035662869...

CVE-2023-33300

FortiNAC suffers an improper neutralization of special elements in a command injection vulnerability affecting the tcp/5555 XML interface, enabling an unauthenticated attacker to copy local files from the device. Affected releases include FortiNAC 7.2.0–7.2.1 and 9.4.0–9.4.3; remediation is in Fo...

CVE-2025-2221

creationtimestamp| type| source ---|---|--- 2025-03-14 09:00:27+00:00| seen| Telegram/MoLM8hQiaQO2UtPbaOFwMBQpRxYe0wTCLGhlDqNNXet-jys 2025-03-14 10:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkdgd6txb426 2025-03-14 10:51:27+00:00| seen| https://t.me/cvedetector/20281...

CVE-2024-13913

creationtimestamp| type| source ---|---|--- 2025-03-14 05:46:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7530 2025-03-14 07:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114159682393652236 2025-03-14 08:20:44+00:00| seen| https://t.me/cvedetector/20265...

Application Accounts Manager 1.0 Cross Site Scripting

Application Accounts Manager version 1.0 suffers from a persistent cross site scripting vulnerability. Exploit Title: Stored XSS on application-accounts-manager 1.0 Date: 03.14.2025 Exploit Author: Ümit AYAZ Vendor Homepage: www.sourcecodester.com Software Link:...

Mageia: Security Advisory (MGASA-2025-0096)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Safari Security Update (HT122285)

Apple Safari is prone to an out-of-bounds write vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

CVE-2025-27159

Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2025-26596 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-1

CVE-2025-26596 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: The IBM® Engineering Lifecycle Engineering products using WebSphere Liberty is vulnerable to a denial of service due to Netty

Summary There is a vulnerability in the Netty library used by IBM WebSphere Application Server Liberty with the grpc-1.0 or grpcClient-1.0 feature enabled. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed in this bulletin: Jazz...

CVE-2025-0652

An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2 could allow unauthorized users to access confidential information intended for internal use only...

D-Link DAP-1562 Null Pointer Dereference Vulnerability

The D-Link DAP-1562 is a wireless bridge from China's AUO D-Link. The D-Link DAP-1562 suffers from a null pointer dereference vulnerability, which originates from a null pointer dereference to parameter a1 in the HTTP POST Request Handler's function pureauthcheck, for which no detailed...