CVE-2025-27701

In the function processcryptocmd, the values of ptrsi can be potentially equal to NULL which is valid value after calling slicemaparray. Later this values will be derefenced without prior NULL check, which can lead to local Temporary DoS or OOB Read, leading to information disclosure...

CVE-2025-3704

creationtimestamp| type| source ---|---|--- 2025-05-27 14:48:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17643 2025-05-27 15:50:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq624djpv2a2...

CVE-2025-48797 Gimp: multiple heap buffer overflows in tga parser

A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow...

CVE-2025-5268

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17625 2025-05-27 13:16:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5rffkkfyz2 2025-05-27 13:53:09+00:00| seen|...

CVE-2025-5270

In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This vulnerability was fixed in Firefox 139 and Thunderbird 139...

CVE-2025-4412

creationtimestamp| type| source ---|---|--- 2025-05-27 10:48:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17619 2025-05-27 10:50:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5jf5td7my2 2025-05-27 13:46:48+00:00| seen|...

CVE-2025-48054

Radashi is a TypeScript utility toolkit. Prior to version 12.5.1, the set function within the Radashi library is vulnerable to prototype pollution. If an attacker can control parts of the path argument to the set function, they could potentially modify the prototype of all objects in the JavaScri...

CVE-2025-5227

creationtimestamp| type| source ---|---|--- 2025-05-27 03:36:06+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4r3gk3cvj2 2025-05-27 03:47:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17599...

M3S-UPD: Efficient Multi-Stage Self-Supervised Learning for Fine-Grained Encrypted Traffic Classification with Unknown Pattern Discovery

The growing complexity of encrypted network traffic presents dual challenges for modern network management: accurate multiclass classification of known applications and reliable detection of unknown traffic patterns. Although deep learning models show promise in controlled environments, their...

CVE-2025-22377

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. A Heap-based Out-of-Bounds Write exists in the GPRS protocol implementation because...

Security Advisory 0120

Security Advisory 0120 . CSAF PDF Date: May 27, 2025 Revision | Date | Changes ---|---|--- 1.0 | May 27, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-2826 CVSSv3.1 Base Score: 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Common Weakness Enumeration: CWE-284: Improper Access...

Uncovering Black-Hat SEO Based Fake E-Commerce Scam Groups from Their Redirectors and Websites

While law enforcements agencies and cybercrime researchers are working hard, fake E-commerce scam is still a big threat to Internet users. One of the major techniques to victimize users is luring them by black-hat search-engine-optimization SEO; making search engines display their lure pages as i...

CVE-2025-5213

creationtimestamp| type| source ---|---|--- 2025-05-26 23:47:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17584 2025-05-26 23:57:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4eubo4vo52...

CVE-2025-5206

creationtimestamp| type| source ---|---|--- 2025-05-26 21:48:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17578 2025-05-26 23:42:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4dx4zk3jm2 2025-05-26...

CVE-2025-23392

creationtimestamp| type| source ---|---|--- 2025-05-26 16:51:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17572 2025-05-26 17:23:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3oue47oow2 2025-05-26 18:06:10+00:00| seen|...

CVE-2025-23394

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1...

CVE-2025-46803

CVE-2025-46803 concerns the screen utility. Affected component: Screen’s PTYs default mode was changed from 0620 to 0622, enabling anyone to write to any Screen PTYs on the system. The issue is local and tied to the default PTY permissions, potentially allowing unauthorized writes. Public-availab...

CVE-2025-46803

The default mode of pseudo terminals PTYs allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system...

CVE-2025-46805

Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root...

CVE-2025-5215

creationtimestamp| type| source ---|---|--- 2025-05-26 13:50:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114574454541216691 2025-05-27 00:47:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17590 2025-05-27 02:56:14+00:00| seen|...