CVE-2025-4062

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn326fee2j 2025-04-29 16:49:51+00:00| seen| https://t.me/cvedetector/24006...

CVE-2025-30194

A flaw was found in DNSdist's DoH implementation using the nghttp2 provider. This vulnerability allows denial of service via a specially crafted DoH exchange that triggers a double-free memory error. Mitigation Mitigation for this issue is either not available or the currently available options d...

CVE-2025-22235

A flaw was found in the Spring Boot configuration. This vulnerability allows unauthorised access to the /null/ path via misconfigured security matchers when referencing disabled or non-exposed Spring Boot actuator endpoints. Mitigation Mitigation for this issue is either not available or the...

CVE-2025-46330

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SFCONMAXRETRY requests were sent. This issue has...

CVE-2025-46753

creationtimestamp| type| source ---|---|--- 2025-04-29 03:50:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnweufjcez2d 2025-04-29 06:47:44+00:00| seen| https://t.me/cvedetector/23965...

CVE-2025-31197

creationtimestamp| type| source ---|---|--- 2025-04-29 03:50:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuffhil2d 2025-04-29 06:47:57+00:00| seen| https://t.me/cvedetector/23975...

CVE-2025-46761

creationtimestamp| type| source ---|---|--- 2025-04-29 03:50:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuemz6q2h 2025-04-29 06:47:45+00:00| seen| https://t.me/cvedetector/23967...

CVE-2025-24179

creationtimestamp| type| source ---|---|--- 2025-04-29 03:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnweudrx5e2y 2025-04-29 06:47:57+00:00| seen| https://t.me/cvedetector/23976...

CVE-2025-46757

creationtimestamp| type| source ---|---|--- 2025-04-29 03:14:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13759 2025-04-29 03:50:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuf3pva2h 2025-04-29 06:47:39+00:00| seen| https://t.me/cvedetector/23962...

CVE-2025-46674

NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress not intended for use during flight, potentially leading to a keystream oracle...

CVE-2025-25403

Slims Senayan Library Management Systems 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/masterfile/colltype.php...

CVE-2025-46326

creationtimestamp| type| source ---|---|--- 2025-04-28 23:10:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13752 2025-04-28 23:45:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvx5ukaaw2l 2025-04-29 02:36:57+00:00| seen|...

CVE-2025-31650

Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial ...

CVE-2025-31651

CVE-2025-31651 affects Apache Tomcat and allows bypass of rewrite rules for a subset of unlikely configurations. Affected branches include Tomcat 11.0.0-M1–11.0.5, 10.1.0-M1–10.1.39, and 9.0.0.M1–9.0.102; Debian and Amazon advisories confirm Tomcat9/10 updates addressing this issue. The connected...

CVE-2025-46550

creationtimestamp| type| source ---|---|--- 2025-04-28 16:52:49+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-ggqx-43h2-55jp 2025-04-29 21:13:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13927 2025-04-29 23:50:51+00:0...

CVE-2025-4022

creationtimestamp| type| source ---|---|--- 2025-04-28 14:10:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13681 2025-04-28 17:24:25+00:00| seen| https://t.me/cvedetector/23909 2025-04-28 17:45:20+00:00| seen|...

CVE-2025-4015

creationtimestamp| type| source ---|---|--- 2025-04-28 10:10:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13665 2025-04-28 13:13:30+00:00| seen| https://t.me/cvedetector/23894 2025-04-28 13:40:12+00:00| seen|...

CVE-2025-2248

creationtimestamp| type| source ---|---|--- 2025-04-28 02:57:52+00:00| seen| https://bsky.app/profile/thewhynet.bsky.social/post/3lntrgsnq6x2h 2025-05-16 20:34:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16753...

Nazgul Nostromo nhttpd Detection (HTTP)

HTTP based detection of Nazgul Nostromo nhttpd. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-41871

SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the user root...