CVE-2025-2136

Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to information disclosure due to hbase-client

Summary hbase-client is used by the ds-cas-lite microservice as part of the HBase API functionality. Vulnerability Details CVEID:CVE-2024-23944 DESCRIPTION: Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child...

CVE-2025-25306

creationtimestamp| type| source ---|---|--- 2025-03-10 19:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk2cmbftsd2v 2025-03-10 19:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114139864871772564 2025-03-10 23:13:49+00:00| seen|...

CVE-2024-54469

creationtimestamp| type| source ---|---|--- 2025-03-10 19:38:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7038 2025-03-10 21:45:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2jmtvsru2s...

Security Bulletin: IBM Aspera Shares is vulnerable to bypass security restrictions and an external entity injection (CVE-2024-45409, CVE-2025-0162)

Summary SAML-Toolkits Ruby SAML and Stats Collector are used by IBM Aspera Shares as part of Ruby-SAML authentication library and Stats Collector XML parsing logic. Vulnerability Details CVEID:CVE-2024-45409 DESCRIPTION: SAML-Toolkits Ruby SAML could allow a remote attacker to bypass security...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

CVE-2025-2017

creationtimestamp| type| source ---|---|--- 2025-03-10 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-121/...

QNAP QTS and QNAP QuTS hero command injection vulnerability (CNVD-2025-17595)

QNAP QTS is a Linux-based NAS operating system launched by QNAP, providing an intuitive and easy-to-use graphical interface and powerful data management features. QNAP QuTS hero is an operating system launched by QNAP specifically for enterprise-level applications, adopting the ZFS file system,...

CVE-2025-2129

creationtimestamp| type| source ---|---|--- 2025-03-09 20:37:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6971 2025-03-09 22:07:50+00:00| seen| https://t.me/cvedetector/19930 2025-03-09 22:35:33+00:00| seen|...

CVE-2025-2127

creationtimestamp| type| source ---|---|--- 2025-03-09 17:37:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6969 2025-03-09 19:37:20+00:00| seen| https://t.me/cvedetector/19928 2025-03-09 22:35:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljy3wokvnv2f 2025-05-12...

CVE-2025-2117

creationtimestamp| type| source ---|---|--- 2025-03-09 08:38:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6961 2025-03-09 10:38:05+00:00| seen| Telegram/fsGqKV06VpR0bxSWxecnbwegtwThBTfbJKjUURkFe7hwZz6P 2025-03-09 10:59:53+00:00| seen|...

autohaus-iundm.de Cross Site Scripting vulnerability OBB-4034461

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-2114

A vulnerability, which was classified as problematic, has been found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This issue affects some unknown processing of the file /WebPages/Adm/OperatorStop.asp of the component Reset Password Interface. The manipulation of t...

Exploit for CVE-2024-27398

CVE-2024-27398 CVE-2024-27398 POC Dmesg Output !PoC Screen...

mit-university.net Open Redirect vulnerability OBB-4034345

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-13882

creationtimestamp| type| source ---|---|--- 2025-03-08 08:37:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6932 2025-03-08 11:00:23+00:00| seen| https://t.me/cvedetector/19889 2025-03-08 11:48:17+00:00| seen|...

CVE-2024-13908

creationtimestamp| type| source ---|---|--- 2025-03-08 07:36:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6929 2025-03-08 09:20:05+00:00| seen| https://t.me/cvedetector/19881 2025-03-08 10:30:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljucwvij6j2f 2025-03-08...

CVE-2025-27603

creationtimestamp| type| source ---|---|--- 2025-03-07 17:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114122406631526554 2025-03-07 18:01:34+00:00| seen| Telegram/MKyyCJNfVvpUH0PEmhW7az9OPnbIUC-jF-3Mo1io2kFbkQ 2025-03-07 18:17:16+00:00| seen|...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in path-to-regexp

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of path-to-regexp Vulnerability Details CVEID:CVE-2024-52798 DESCRIPTION: path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can ...

Security Bulletin: IBM Engineering Requirements Management DOORS Next is vulnerable to Target Blank Vulnerability (CVE-2024-39727)

Summary IBM Engineering Requirements Management DOORS Next is vulnerable to Target Blank Vulnerability CVE-2024-39727. Vulnerability Details CVEID:CVE-2024-39727 DESCRIPTION: IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to...