CVE-2025-3932

It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...

GHSA-G5MQ-PRX7-C588

creationtimestamp| type| source ---|---|--- 2025-05-14 16:19:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114507092132283688 2025-05-14 16:33:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16329...

CVE-2024-52601

iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, anyone with an account having portal access can have read access to objects they're not allowed to see by querying an unprotected route. Versions 2.7.12, 3.1.3, and 3.2.1 contain a fix for the issue...

CVE-2025-24969 iTop portal user can see any other contact's picture

iTop is an web based IT Service Management tool. Prior to version 3.2.1, a portal user can see any other contacts picture by changing the picture ID in the URL. Version 3.2.1 contains a patch for the issue...

CVE-2025-0134

creationtimestamp| type| source ---|---|--- 2025-05-14 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0134 2025-05-14 18:32:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16367 2025-05-14 19:03:19+00:00| seen|...

CVE-2025-0137

creationtimestamp| type| source ---|---|--- 2025-05-14 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0137 2025-05-14 18:31:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16363 2025-05-14 19:03:21+00:00| seen|...

CVE-2025-3769

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.92 via the 'viewbookingsummaryinlightbox' due to missing validation on a user controlled key. This makes it possible...

CVE-2025-4430

creationtimestamp| type| source ---|---|--- 2025-05-14 11:00:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4tna6kslj2 2025-05-14 11:31:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16303 2025-05-14 13:02:53+00:00| seen|...

CVE-2025-47891

creationtimestamp| type| source ---|---|--- 2025-05-14 06:07:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp4diojxfd2h...

CVE-2025-26795

creationtimestamp| type| source ---|---|--- 2025-05-14 00:48:43+00:00| seen| https://seclists.org/oss-sec/2025/q2/141 2025-05-14 11:00:15+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4tncrgl7p2 2025-05-14 11:31:20+00:00| seen|...

CVE-2025-45835

A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENTLENGTH, causing the program to crash and...

CVE-2025-43563

creationtimestamp| type| source ---|---|--- 2025-05-14 00:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3pehkwoq2o 2025-05-15 04:32:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16447...

GLSA-202505-07 : FreeType: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-202505-07 FreeType: Remote Code Execution Multiple vulnerabilities have been discovered in FreeType. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fr...

CVE-2025-44879

CVE-2025-44879 concerns WS-WN572HP3 (V230525) with a buffer overflow in the file path "/www/cgi-bin/upload.cgi". The described impact is a Denial of Service (DoS) via a crafted HTTP request. Concrete details reported across multiple sources confirm the affected device and vulnerable component, wi...

CVE-2025-21094

Improper input validation in the UEFI firmware DXE module for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20103

Insufficient resource pool in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20103

Insufficient resource pool in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20101

Out-of-bounds read for some IntelR Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denial of service via local access...

CVE-2025-20079

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-45332

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...