CVE-2025-29994

creationtimestamp| type| source ---|---|--- 2025-03-13 13:08:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114155279058410374 2025-03-13 13:31:52+00:00| seen| Telegram/xe2ey9QZy3C60YFmNe9CqutDcHb7CC1cr5CKlx9gtbgm3M 2025-03-13 15:37:08+00:00| seen| https://t.me/cvedetector/20214...

CVE-2025-29996

creationtimestamp| type| source ---|---|--- 2025-03-13 13:08:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114155279058410374 2025-03-13 13:31:52+00:00| seen| Telegram/xe2ey9QZy3C60YFmNe9CqutDcHb7CC1cr5CKlx9gtbgm3M 2025-03-13 15:37:12+00:00| seen| https://t.me/cvedetector/20216...

CVE-2025-29997

creationtimestamp| type| source ---|---|--- 2025-03-13 13:08:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114155279058410374 2025-03-13 13:31:52+00:00| seen| Telegram/xe2ey9QZy3C60YFmNe9CqutDcHb7CC1cr5CKlx9gtbgm3M 2025-03-13 15:37:06+00:00| seen| https://t.me/cvedetector/20212...

CVE-2020-36843

creationtimestamp| type| source ---|---|--- 2025-03-13 05:44:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7401 2025-03-13 08:55:55+00:00| seen| https://t.me/cvedetector/20202 2025-03-13 11:22:24+00:00| seen|...

CVE-2024-26290

creationtimestamp| type| source ---|---|--- 2025-03-12 20:42:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7373 2025-03-12 22:53:42+00:00| seen| https://t.me/cvedetector/20166 2025-03-13 17:06:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114156212301691687 2025-04-15...

CVE-2025-20144

creationtimestamp| type| source ---|---|--- 2025-03-12 18:36:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114150904104711116 2025-03-21 21:22:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8453...

CVE-2025-20209 Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 2 IKEv2 function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets. This vulnerability is due to improper handling of malformed IKEv2 packets. An...

Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 2 IKEv2 function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets. This vulnerability is due to improper handling of malformed IKEv2 packets. An...

CVE-2025-29891

creationtimestamp| type| source ---|---|--- 2025-03-12 15:58:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114150283427551221 2025-03-12 16:03:09+00:00| seen| https://cyberplace.social/users/GossiTheDog/statuses/114150301427230872 2025-03-12 16:07:40+00:00| seen|...

CVE-2024-13872

creationtimestamp| type| source ---|---|--- 2025-03-12 12:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk6m33fr4b2g 2025-03-12 12:56:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114149569646900003 2025-03-12 14:40:55+00:00| published-proof-of-concept|...

The vulnerability of the MFlash secure data exchange platform lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the MFlash secure messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting specially crafted HTML code...

The vulnerability of the MFlash secure data exchange platform lies in the lack of mechanisms for neutralizing elements related to CSV files, allowing attackers to execute arbitrary commands.

The vulnerability of the MFlash secure messaging platform is related to the lack of mechanisms for neutralizing elements related to CSV files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Cisco IOS XR 安全漏洞

Cisco IOS XR is an operating system developed by the American company Cisco for its network devices. A denial of service vulnerability exists in Cisco IOS XR. The vulnerability stems from the incorrect handling of malformed IKEv2 packets. An attacker could exploit the vulnerability to cause a...

The vulnerability of the MFlash secure data exchange platform lies in its insufficient authentication attempt limitation, which allows a perpetrator to gain unauthorized access to the platform.

The vulnerability of the MFlash secure messaging platform is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the platform...

Alleged Co-Founder of Garantex Arrested in India

Authorities in India today arrested the alleged co-founder of Garantex , a cryptocurrency exchange sanctioned by the U.S. government in 2022 for facilitating tens of billions of dollars in money laundering by transnational criminal and cybercriminal organizations. Sources close to the investigati...

CVE-2025-24035

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:40:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114145022545782390 2025-03-11 17:48:34+00:00| seen|...

CVE-2024-52961

creationtimestamp| type| source ---|---|--- 2025-03-11 15:48:25+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114144582151960068 2025-03-11 15:48:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144582323119479 2025-03-11 17:37:45+00:00| seen|...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere due to the improper validation of target registry domains during the token exchange process. An attacker can extract and misuse authentication tokens by directin...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere due to the improper validation of target registry domains during the token exchange process. An attacker can extract and misuse authentication tokens by directin...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere due to the improper validation of target registry domains during the token exchange process. An attacker can extract and misuse authentication tokens by directin...