CVE-2025-46400

creationtimestamp| type| source ---|---|--- 2025-04-23 21:04:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13151 2025-04-24 00:02:03+00:00| published-proof-of-concept| Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0 2025-04-24 00:31:12+00:00| seen| https://t.me/cvedetector/23618...

CVE-2025-45427

creationtimestamp| type| source ---|---|--- 2025-04-23 17:19:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnipapo3j32t 2025-04-23 17:48:49+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114388535130823992 2025-04-23 18:39:46+00:00| seen|...

CVE-2025-2760

GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2025-1054

creationtimestamp| type| source ---|---|--- 2025-04-23 10:10:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13017 2025-04-23 13:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnibm3l7xc2r 2025-04-23 14:28:59+00:00| seen| https://t.me/cvedetector/23588...

CVE-2025-3530

creationtimestamp| type| source ---|---|--- 2025-04-23 09:20:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnhuhj2qcb2r 2025-04-23 12:48:32+00:00| seen| https://t.me/cvedetector/23581...

CVE-2025-0926

CVE-2025-0926 affects AXIS Camera Station Pro. A non-admin user can remove system files, causing a boot loop by redirecting a file deletion during video recording. The issue is tied to Axis products and is mitigated by a patched Axis advisory; Axis has released a fixed version. Exploitation detai...

CVE-2025-46394

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences...

CVE-2025-28019

The TOTOLINK A800R wireless router (version V4.1.2cu.5137_B20200730 ) contains a buffer overflow vulnerability in the downloadFile.cgi component. The root cause is the copying of buffers without validating the size of the input data. Remote attackers can exploit this issue to execute arbitrary co...

CVE-2025-31328

creationtimestamp| type| source ---|---|--- 2025-04-22 21:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngln3ulrl2c 2025-04-22 22:35:16+00:00| seen| https://t.me/cvedetector/23541...

CVE-2025-37087

A vulnerability exists in the cmdb service of the HPE Performance Cluster Manager (HPCM) , specifically affecting versions 1.12 and earlier . Due to a missing authorization issue (CWE-862 ), an attacker could gain unauthorized access to an arbitrary file on the server host. The potential security...

CVE-2025-28038

creationtimestamp| type| source ---|---|--- 2025-04-22 20:19:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngitkis2s2c 2025-04-22 21:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114383815046638917...

CVE-2012-12332

creationtimestamp| type| source ---|---|--- 2025-04-22 19:58:28+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lnghoau5b222...

CVE-2025-3767

creationtimestamp| type| source ---|---|--- 2025-04-22 19:09:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngewdoelk2v 2025-04-22 20:54:50+00:00| seen| https://t.me/cvedetector/23533...

CVE-2025-1950 IBM Hardware Management Console - Power Systems command execution

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source...

CVE-2025-23176 Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2025-23175

CVE-2025-23175 relates to a multiple XSS (CWE-79) exposure associated with Tecnick TCExam. Connected sources indicate the vulnerable software is Tecnick TCExam, including version 16.3.2 per CNNVD, with reports in PT-Security citing the Tecnick/Tcexam name. The documents do not provide concrete ex...

WordPress Seriously Simple Podcasting plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Seriously Simple Podcasting versions = 3.9.0...

CVE-2025-46237

creationtimestamp| type| source ---|---|--- 2025-04-22 10:03:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12830 2025-04-22 11:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju5d3mx2l 2025-04-22 14:13:41+00:00| seen|...

CVE-2025-46252

creationtimestamp| type| source ---|---|--- 2025-04-22 10:02:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12816 2025-04-22 11:05:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6umig2v 2025-04-22 14:13:28+00:00| seen|...

CVE-2025-30030

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01 2025-06-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-388/...