CVE-2025-4299

creationtimestamp| type| source ---|---|--- 2025-05-05 12:28:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114455221831786910 2025-05-06 00:19:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15014 2025-05-06 00:36:52+00:00| seen|...

CVE-2025-3583

creationtimestamp| type| source ---|---|--- 2025-05-05 06:18:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14838 2025-05-05 10:01:24+00:00| seen| https://t.me/cvedetector/24441 2025-05-05 10:21:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3log5hwzg732p...

CVE-2025-4263

creationtimestamp| type| source ---|---|--- 2025-05-05 04:18:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14831 2025-05-05 06:15:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofpri3bsn2t 2025-05-05 07:30:45+00:00| exploited|...

CVE-2025-4261

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

CVE-2025-4260

creationtimestamp| type| source ---|---|--- 2025-05-05 03:19:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14830 2025-05-05 06:16:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofprj5jm42p 2025-05-05 07:30:48+00:00| seen|...

CVE-2025-4254

creationtimestamp| type| source ---|---|--- 2025-05-05 00:19:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14818 2025-05-05 03:19:55+00:00| exploited| https://t.me/cvedetector/24421 2025-05-05 04:15:53+00:00| seen|...

CVE-2025-45612

CVE-2025-45612 affects Xmall v1.1. The issue is an incorrect access-control implementation that lets an attacker bypass authentication by sending a crafted GET request to /index. The CVE entry is rated CVSS 3.1 with a base score of 9.8 (CRITICAL); attack vector NETWORK, no user interaction requir...

CVE-2025-4251

creationtimestamp| type| source ---|---|--- 2025-05-04 22:18:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14814 2025-05-05 00:16:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lof3p2giyk2l 2025-05-05 00:30:34+00:00| published-proof-of-concept|...

CVE-2023-53124

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sastransportportadd Port is allocated by sasportallocnum and rphy is allocated by either sasenddevicealloc or sasexpanderalloc, all of which may return NULL. So we need to check the...

CVE-2025-4250

creationtimestamp| type| source ---|---|--- 2025-05-04 10:10:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lodmgscxhf2t 2025-05-04 12:00:26+00:00| published-proof-of-concept| Telegram/XaegXkt5qWfS48g5X2BkM0QOoVHonOp2knLb5J-tzpRmds 2025-05-04 13:06:51+00:00| seen|...

CVE-2025-4178

A vulnerability was found in xiaowei1118 javaserver up to 11a5bac8f4ba1c17e4bc1b27cad6d24868500e3a on Windows and classified as critical. This issue affects some unknown processing of the file /src/main/java/com/changyu/foryou/controller/FoodController.java of the component File Upload API. The...

CVE-2025-1838

IBM Cloud Pak for Business Automation 24.0.0 and 24.0.1 through 24.0.1 IF001 Authoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service...

CVE-2025-1495 IBM Business Automation Workflow missing authentication

IBM Business Automation Workflow 24.0.0 and 24.0.1 through 24.0.1 IF001 Center may leak sensitive information due to missing authorization validation...

CVE-2025-4238 PCMan FTP Server MGET Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component MGET Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-4237 PCMan FTP Server MDELETE Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component MDELETE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publ...

SUSE CVE-2023-53085

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

SUSE CVE-2023-53142

In the Linux kernel, the following vulnerability has been resolved: ice: copy last block omitted in icegetmoduleeeprom icegetmoduleeeprom is broken since commit e9c9692c8a81 "ice: Reimplement module reads used by ethtool" In this refactor, icegetmoduleeeprom reads the eeprom in blocks of size 8...

CVE-2025-47245

In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role...

CVE-2025-46723

creationtimestamp| type| source ---|---|--- 2025-05-02 23:17:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14630 2025-05-03 01:36:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo7vcxbg7uz2 2025-05-03...

CVE-2025-47226

creationtimestamp| type| source ---|---|--- 2025-05-02 21:16:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14612 2025-05-03 00:01:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo7zvoy4e32p 2025-05-03 00:19:11+00:00| seen|...