CVE-2024-45554 Use After Free in DSP Service

Memory corruption during concurrent SSR execution due to race condition on the global maps list...

CVE-2025-3281 User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.1 via the createstripesubscription function, due to missing validation on the 'memberid' use...

CVE-2025-46590

Bypass vulnerability in the network search instruction authentication module Impact: Successful exploitation of this vulnerability can bypass authentication and enable access to some network search functions...

CVE-2025-46584

CVE-2025-46584 relates to Huawei HarmonyOS and describes an improper authentication logic implementation in the file system module. The issue is locally exploitable (attack vector: LOCAL) with low authentication complexity and LOW privileges required; confidentiality is affected (CVE/metrics show...

CVE-2025-4287

A problematic vulnerability has been identified in PyTorch version 2.6.0 with CUDA 12.4. The affected component is the torch.cuda.nccl.reduce function within the torch/cuda/nccl.py file. Exploitation of this vulnerability can lead to a denial-of-service condition. The attack can be launched from...

CVE-2025-4312

creationtimestamp| type| source ---|---|--- 2025-05-06 04:20:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15043 2025-05-06 06:21:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajp7vqu2j 2025-05-06 07:00:55+00:00| published-proof-of-concept|...

CVE-2025-47301

creationtimestamp| type| source ---|---|--- 2025-05-06 03:20:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15040 2025-05-06 06:21:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajobbnn2h...

CVE-2025-4303

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack ma...

CVE-2025-2509

Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to VM escape via crafted vertex elements data triggering an out-of-bounds read in utilformatdescription...

Photon OS 5.0: Gnuplot PHSA-2025-5.0-0516

An update of the gnuplot package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0516. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-44074

creationtimestamp| type| source ---|---|--- 2025-05-05 22:19:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15008 2025-05-06 00:21:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lohmham6eu2r 2025-05-06 01:55:43+00:00| seen|...

CVE-2025-4288

creationtimestamp| type| source ---|---|--- 2025-05-05 21:20:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14999 2025-05-06 00:15:07+00:00| exploited| https://t.me/cvedetector/24498 2025-05-06 00:21:53+00:00| seen|...

CVE-2025-47256

creationtimestamp| type| source ---|---|--- 2025-05-05 21:02:56+00:00| published-proof-of-concept| Telegram/YaDf5xJ3685njZbAKRVppFbIpFzplLD7yW1OQGHI6Xa2lo 2025-05-06 20:21:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15205 2025-05-06 22:26:57+00:00| seen|...

CVE-2025-46734

creationtimestamp| type| source ---|---|--- 2025-05-05 20:20:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14988 2025-05-06 00:15:15+00:00| seen| https://t.me/cvedetector/24505 2025-05-06 00:21:52+00:00| seen|...

CVE-2025-45611

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...

CVE-2025-46734

league/commonmark is a PHP Markdown parser. A cross-site scripting XSS vulnerability in the Attributes extension of the league/commonmark library versions 1.5.0 through 2.6.x allows remote attackers to insert malicious JavaScript calls into HTML. The league/commonmark library provides configurati...

CVE-2025-43851

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The modelchoose variable takes user input e.g. a path to a model and passes it to the uvr function in vr.py. In uvr , a new instance...

CVE-2024-51991

October is a Content Management System CMS and web platform. A vulnerability in versions prior to 3.7.5 affects authenticated administrators with sites that have the media.cleanvectors configuration enabled. This configuration will sanitize SVG files uploaded using the media manager. This...

CVE-2025-45042

creationtimestamp| type| source ---|---|--- 2025-05-05 16:41:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3logspwquja2h 2025-05-05 20:49:26+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3lohale4ehx2z...

The AI chatbot cop squad is here (Lock and Code S06E09)

This week on the Lock and Code podcast … “Heidi” is a 36-year-old, San Francisco-born, divorced activist who is lonely, outspoken, and active on social media. “Jason” is a shy, bilingual teenager whose parents immigrated from Ecuador who likes anime, gaming, comic books, and hiking. Neither of th...