CVE-2025-31258

CVE-2025-31258 affects macOS, with a potential sandbox escape via the RemoteViewServices mechanism. The issue was mitigated by removing the vulnerable code and is fixed in macOS Sequoia 15.5 (Apple’s advisory confirms the patch). Affected products prior to the Sequoia 15.5 release could be expose...

CVE-2025-47712

No description is available for this CVE...

CVE-2025-47711

No description is available for this CVE...

CVE-2025-46747

An authenticated user without user-management permissions could identify other user accounts...

CVE-2025-4560

The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions. These functions include viewing the administrator list, viewing and editing IP settings, and uploading files...

CVE-2025-46610

CVE-2025-46610 relates to ARTEC EMA Mail 6.92, which is reported vulnerable to CSRF. The CVSS data indicates a high-severity issue with a network attack vector (AV:N), requiring user interaction (UI:R) and no privileges (PR:N), with fully high impact on confidentiality, integrity, and availabilit...

CVE-2025-26846

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

CVE-2024-13759

Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64 allows local attackers to gain system-level privileges via arbitrary file deletion...

CVE-2025-4538

creationtimestamp| type| source ---|---|--- 2025-05-11 11:28:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15928 2025-05-11 12:05:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lovdj6ghglg2 2025-05-11...

CVE-2025-4534

A vulnerability, which was classified as problematic, has been found in SunGrow Logger1000 01A. This issue affects some unknown processing. The manipulation leads to weak password requirements. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is...

CVE-2025-4529 Seeyon Zhiyuan OA Web Application System ZIP File M3CoreController.class download path traversal

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file...

CVE-2025-47828

CVE-2025-47828 affects Lumi H5P-Nodejs-library before 9.3.3. The root cause is omission of sanitizeHtml for plain text strings, enabling potential Cross-Site Scripting (XSS) risks. Impact is limited to confidentiality and integrity with no reported availability impact; attack vector is network, w...

CVE-2025-4525 Discord WINSTA.dll uncontrolled search path

A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows. Affected by this issue is some unknown functionality in the library WINSTA.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an...

CVE-2025-47814

creationtimestamp| type| source ---|---|--- 2025-05-10 22:27:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15915 2025-05-10 23:27:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lou3qorht3r2 2025-05-11 01:39:05+00:00| seen|...

CVE-2025-47814

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c...

CVE-2025-4507

creationtimestamp| type| source ---|---|--- 2025-05-10 17:38:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15904 2025-05-10 19:30:42+00:00| published-proof-of-concept| Telegram/URtKTzJadoupAu9znx5u6xGbKwitW4xrYQTd2v3oSrAWdo 2025-05-10 20:37:33+00:00| seen|...

CVE-2025-4497

creationtimestamp| type| source ---|---|--- 2025-05-10 07:26:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15886 2025-05-10 07:31:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3losgbynhvh62 2025-05-10...

CVE-2025-3839

creationtimestamp| type| source ---|---|--- 2025-05-10 04:47:13+00:00| seen| https://bsky.app/profile/nyamongo.bsky.social/post/3los55ewsck2u 2026-01-23 05:25:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2xls32e42h 2026-01-23 07:44:19+00:00| seen|...

CVE-2025-4482

creationtimestamp| type| source ---|---|--- 2025-05-09 18:12:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqzlo2o2ra2 2025-05-09 20:00:31+00:00| seen| Telegram/75NSb9FR4fu9qv-QQvoI2QyehVHqHDGkOlpqCZTQx9z33k 2025-05-09 22:31:33+00:0...

CVE-2024-8973 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. It was possible to cause a DoS condition via GitHub import requests using a malicious crafted payload...