CVE-2025-33074

creationtimestamp| type| source ---|---|--- 2025-04-30 17:21:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114428064949898924 2025-04-30 22:06:18+00:00| seen| https://t.me/cvedetector/24146 2025-05-02 04:15:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14426...

GHSA-JRR2-X33P-6HVC

creationtimestamp| type| source ---|---|--- 2025-04-30 15:59:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427741773438031 2025-04-30 17:32:01+00:00| seen| Telegram/Gwvh-n-ygZ7AZvt4Z14lI64V1AihU4WxZxoYYl7z1l7jTPI...

GHSA-5XV6-7JM3-FMG5

creationtimestamp| type| source ---|---|--- 2025-04-30 15:57:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427734857012817 2025-04-30 17:32:01+00:00| seen| Telegram/Gwvh-n-ygZ7AZvt4Z14lI64V1AihU4WxZxoYYl7z1l7jTPI...

GHSA-MVGM-3RW2-7J4R

creationtimestamp| type| source ---|---|--- 2025-04-30 15:56:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427728713256833 2025-04-30 17:32:01+00:00| seen| Telegram/Gwvh-n-ygZ7AZvt4Z14lI64V1AihU4WxZxoYYl7z1l7jTPI...

GHSA-563G-P98J-MC9Q

creationtimestamp| type| source ---|---|--- 2025-04-30 01:00:20+00:00| published-proof-of-concept| Telegram/VXRJJzicS6h8NsLqawa6xGEeyKGpqGgMZmK2-Vj4U4LCCLc 2025-04-30 13:09:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427071199222062...

GHSA-WC9G-6J9W-HR95

creationtimestamp| type| source ---|---|--- 2025-04-29 21:10:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114423300046150064 2025-04-29 21:13:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13929 2025-04-29 23:00:34+00:00| published-proof-of-concept|...

CERTFR-2025-CTI-006

creationtimestamp| type| source ---|---|--- 2025-04-29 13:07:36+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lnxdxzdtkz2d 2025-04-29 13:07:46+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114421403168054880 2025-04-30 07:38:56+00:00| seen|...

CVE-2025-30194 Denial of service via crafted DoH exchange

When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illegal memory access double-free and crash of DNSdist, causing a denial of service. The remedy is: upgrade to the patched 1.9.9 version. A...

CVE-2025-30194 Denial of service via crafted DoH exchange

When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illegal memory access double-free and crash of DNSdist, causing a denial of service. The remedy is: upgrade to the patched 1.9.9 version. A...

SUSE-SU-2025:20210-1 Security update for elemental-toolkit

This update for elemental-toolkit fixes the following issues: - Updated to version 2.1.3: Simplify podman calls in CI steup Switched GHA runners to Ubuntu 24.04 Updated year in headers Updated to go1.23, required by the new x/crypto module CVE-2025-22870: Fixed proxy bypass using IPv6 zone IDs...

Security Bulletin: Potential Oracle Outside In Technology Vulnerabilities Exposed in ECM Products (CVE-2011-2264, CVE-2011-0794, and CVE-2011-0808)

Question Oracle Outside In Technology contains exploitable vulnerabilities in the CorelDRAW CVE-2011-2264 file parser, the File ID SDK CVE-2011-0794, and file filters CVE-2011-0808. Each of these vulnerabilities may allow a remote, unauthenticated user to execute arbitrary code on a vulnerable...

Amazon Linux 2 : runc (ALASECS-2025-062)

The version of runc installed on the remote host is prior to 1.0.0-0.3.20210225.git12644e6. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-062 advisory. The runc package is vulnerable to a symlink exchange attack whereby an attacker can request a seemingly...

The vulnerability of the OnPayloadReceived() function in the data exchange utility for Google Quick Share allows a hacker to upload arbitrary files onto the user’s device.

The vulnerability of the OnPayloadReceived function in the Google Quick Share data exchange tool is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow an attacker to upload arbitrary files to the user’s device remotely...

CVE-2025-46579

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed...

ZTE GoldenDB 安全漏洞

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. ZTE GoldenDB suffers from a DDE injection vulnerability, which can be...

GHSA-F3GW-9WW9-JMC3

creationtimestamp| type| source ---|---|--- 2025-04-25 18:02:30+00:00| seen| Telegram/t8K1XuU9DycjdS-BJ0HBwR2vMp2ysg1gNZKK5Q0GJ-ZI8I 2025-04-27 13:10:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114410089366436743 2025-04-29 04:11:16+00:00| published-proof-of-concept|...

CVE-2025-2069

creationtimestamp| type| source ---|---|--- 2025-04-25 16:15:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114399493625863180 2025-04-25 17:07:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13473 2025-04-25 19:11:04+00:00| seen| https://t.me/cvedetector/23760...

CVE-2024-6199

creationtimestamp| type| source ---|---|--- 2025-04-25 13:07:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13410 2025-04-25 13:47:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114398911743945796 2025-04-25 17:30:48+00:00| seen|...

GHSA-VQFR-H8MV-GHFJ

creationtimestamp| type| source ---|---|--- 2025-04-24 19:09:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114394512917622666...

CVE-2024-55571

creationtimestamp| type| source ---|---|--- 2025-04-24 10:08:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13214 2025-04-24 13:11:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114393106631815821...