CVE-2025-27525 Information Exposure vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager

Information Exposure vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06...

CVE-2025-3742

creationtimestamp| type| source ---|---|--- 2025-05-15 06:33:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16455 2025-05-15 06:57:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp6wrhl54a2o...

CVE-2025-3917

creationtimestamp| type| source ---|---|--- 2025-05-15 04:42:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp6p7tgsv22e 2025-05-15 14:35:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16514...

CVE-2025-44185

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery CSRF in /admin/changepass.php via the password parameter...

CVE-2025-32421

creationtimestamp| type| source ---|---|--- 2025-05-14 23:33:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16435 2025-05-15 02:57:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp6jdwqmgk2h 2025-05-15 09:00:04+00:00| seen|...

CVE-2015-7575

creationtimestamp| type| source ---|---|--- 2025-05-14 23:15:09+00:00| seen| https://gist.github.com/0xi1y4an7/605ea54aa36cbd993d66a4e7d1674901 2025-12-16 12:21:21+00:00| seen| https://gist.github.com/jerinisready/f588121fb487feb7edbfe9ee2be11a0e...

CVE-2025-47888

creationtimestamp| type| source ---|---|--- 2025-05-14 22:57:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63whvzkn2j...

CVE-2025-47886

creationtimestamp| type| source ---|---|--- 2025-05-14 22:57:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63whf4w42t...

CVE-2024-45067

creationtimestamp| type| source ---|---|--- 2025-05-14 22:32:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16431 2025-05-15 00:37:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp6bjexzbq2h 2025-05-15 18:12:03+00:00| seen|...

CVE-2025-29691

creationtimestamp| type| source ---|---|--- 2025-05-14 21:32:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16414 2025-05-14 22:57:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63wik7ez2r...

CVE-2024-58101

creationtimestamp| type| source ---|---|--- 2025-05-14 20:32:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16405 2025-05-14 22:57:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63wgrfos2w 2025-10-13 11:24:21+00:00| seen|...

CVE-2025-33104 IBM WebSphere Application Server cross

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2025-4664

creationtimestamp| type| source ---|---|--- 2025-05-14 18:31:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16356 2025-05-14 18:57:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp5oizyvnz2w 2025-05-14 20:40:49+00:00| seen|...

CVE-2025-20103

Insufficient resource pool in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-3932

It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...

GHSA-G5MQ-PRX7-C588

creationtimestamp| type| source ---|---|--- 2025-05-14 16:19:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114507092132283688 2025-05-14 16:33:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16329...

CVE-2024-52601

iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, anyone with an account having portal access can have read access to objects they're not allowed to see by querying an unprotected route. Versions 2.7.12, 3.1.3, and 3.2.1 contain a fix for the issue...

CVE-2025-24969 iTop portal user can see any other contact's picture

iTop is an web based IT Service Management tool. Prior to version 3.2.1, a portal user can see any other contacts picture by changing the picture ID in the URL. Version 3.2.1 contains a patch for the issue...

CVE-2025-0137

creationtimestamp| type| source ---|---|--- 2025-05-14 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0137 2025-05-14 18:31:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16363 2025-05-14 19:03:21+00:00| seen|...

CVE-2025-0134

creationtimestamp| type| source ---|---|--- 2025-05-14 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0134 2025-05-14 18:32:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16367 2025-05-14 19:03:19+00:00| seen|...