CVE-2025-45612

The xmall e-commerce platform (v1.1) contains an incorrect access control vulnerability. An attacker can bypass authentication by sending a crafted GET request to the "/index" API endpoint. This flaw allows unauthorized access to the system. As a temporary workaround, users are advised to restric...

CVE-2025-4251

creationtimestamp| type| source ---|---|--- 2025-05-04 22:18:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14814 2025-05-05 00:16:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lof3p2giyk2l 2025-05-05 00:30:34+00:00| published-proof-of-concept|...

CVE-2023-53124

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sastransportportadd Port is allocated by sasportallocnum and rphy is allocated by either sasenddevicealloc or sasexpanderalloc, all of which may return NULL. So we need to check the...

CVE-2025-4250

creationtimestamp| type| source ---|---|--- 2025-05-04 10:10:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lodmgscxhf2t 2025-05-04 12:00:26+00:00| published-proof-of-concept| Telegram/XaegXkt5qWfS48g5X2BkM0QOoVHonOp2knLb5J-tzpRmds 2025-05-04 13:06:51+00:00| seen|...

CVE-2025-4178

A vulnerability was found in xiaowei1118 javaserver up to 11a5bac8f4ba1c17e4bc1b27cad6d24868500e3a on Windows and classified as critical. This issue affects some unknown processing of the file /src/main/java/com/changyu/foryou/controller/FoodController.java of the component File Upload API. The...

CVE-2025-1838

IBM Cloud Pak for Business Automation 24.0.0 and 24.0.1 through 24.0.1 IF001 Authoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service...

CVE-2025-1495 IBM Business Automation Workflow missing authentication

IBM Business Automation Workflow 24.0.0 and 24.0.1 through 24.0.1 IF001 Center may leak sensitive information due to missing authorization validation...

CVE-2025-4238 PCMan FTP Server MGET Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component MGET Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-4237 PCMan FTP Server MDELETE Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component MDELETE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publ...

SUSE CVE-2023-53085

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

SUSE CVE-2023-53142

In the Linux kernel, the following vulnerability has been resolved: ice: copy last block omitted in icegetmoduleeeprom icegetmoduleeeprom is broken since commit e9c9692c8a81 "ice: Reimplement module reads used by ethtool" In this refactor, icegetmoduleeeprom reads the eeprom in blocks of size 8...

CVE-2025-47245

In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role...

CVE-2025-46723

creationtimestamp| type| source ---|---|--- 2025-05-02 23:17:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14630 2025-05-03 01:36:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo7vcxbg7uz2 2025-05-03...

CVE-2025-47226

creationtimestamp| type| source ---|---|--- 2025-05-02 21:16:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14612 2025-05-03 00:01:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo7zvoy4e32p 2025-05-03 00:19:11+00:00| seen|...

CVE-2025-46566

creationtimestamp| type| source ---|---|--- 2025-05-02 18:19:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14558 2025-06-04 00:32:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqqkl2lmpn2q...

CVE-2025-46332

creationtimestamp| type| source ---|---|--- 2025-05-02 17:16:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14526 2025-05-02 18:18:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo7gnmckelv2 2025-05-02...

CVE-2023-53085

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

CVE-2023-53080

In the Linux kernel, the following vulnerability has been resolved: xsk: Add missing overflow check in xdpumemreg The number of chunks can overflow u32. Make sure to return -EINVAL on overflow. Also remove a redundant u32 cast assigning umem-npgs...

UBUNTU-CVE-2023-53085

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

CVE-2023-53073

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable 'status' which contains the unhandled overflow bits is not being properly masked in some cases, displaying the following warning: WARNING: CPU: 156 PID: 475601 at...