CVE-2025-31353

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01 2025-06-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-396/...

CVE-2025-1976

creationtimestamp| type| source ---|---|--- 2025-04-22 07:47:32+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3lnf6t77jcc25 2025-04-23 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3pgntgn2t 2025-04-24 04:05:58+00:00| seen|...

CVE-2025-26413

creationtimestamp| type| source ---|---|--- 2025-04-22 07:21:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lnf5fbk2n52h 2025-04-22 08:02:11+00:00| seen| https://bsky.app/profile/potato.software/post/3lnf7nhiw7x27 2025-04-22 08:03:52+00:00| seen|...

CVE-2025-26413

Apache Kvrocks versions through 2.11.1 are vulnerable to an Improper Input Validation flaw within the SETRANGE command. The application fails to verify if the offset input is a positive integer, allowing it to be used as an out-of-range string index. This flaw can lead to a server crash . To reme...

CVE-2025-2291

creationtimestamp| type| source ---|---|--- 2025-04-22 01:38:00+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3lnek5qwsyqo2 2025-04-23 07:35:38+00:00| seen| https://bsky.app/profile/theemerichunter.bsky.social/post/3lnhomvsxmg25 2025-08-09 13:26:56+00:00...

CVE-2025-3855

Summary of CVE-2025-3855 (CodeCanyon RISE Ultimate Project Manager 3.8.2) A vulnerability exists in the component “Profile Picture Handler” for the endpoint /index.php/team_members/save_profile_image/ where the argument profile_image_file is manipulated, leading to improper control of resource id...

CVE-2025-2987

creationtimestamp| type| source ---|---|--- 2025-04-22 00:03:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12772 2025-04-22 03:04:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lneoz3bexw2t 2025-04-22 04:11:22+00:00| seen| https://t.me/cvedetector/23476...

CVE-2025-32955

creationtimestamp| type| source ---|---|--- 2025-04-21 21:02:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12760 2025-04-21 23:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lneblkxtth2l 2025-04-22 00:00:22+00:00| seen|...

CVE-2025-23174

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2025-32793

creationtimestamp| type| source ---|---|--- 2025-04-21 16:02:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12686 2025-04-21 18:59:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lndtv7rzho2y 2025-04-21 19:49:42+00:00| seen|...

CVE-2025-3839

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...

CVE-2025-43970

creationtimestamp| type| source ---|---|--- 2025-04-21 01:02:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12628 2025-04-21 01:51:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114373444529201097 2025-04-21 02:49:17+00:00| seen|...

CVE-2025-43961

creationtimestamp| type| source ---|---|--- 2025-04-21 00:05:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12627 2025-04-21 02:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnc5oyakao2l 2025-04-21 03:56:19+00:00| seen|...

CVE-2025-28104

The blogging application laskBlog v2.6.1 contains an improper access control vulnerability (CWE-284). Attackers can bypass security measures and access all usernames by providing a specially crafted input. While no specific patch version is listed, it is recommended to restrict access to sensitiv...

CVE-2025-29659

Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmdlisten" function located in the "cmd" binary...

CVE-2025-43919

GNU Mailman 2.1.39, as bundled in cPanel and WHM, allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman aka the private archive authentication endpoint via the username parameter. NOTE: multiple third parties report that they are unable t...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CGA-9WHM-XHWQ-HV3G

Bulletin has no description...

CVE-2025-2111

CVE-2025-2111 concerns the WordPress plugin Insert Headers And Footers (versions up to 3.1.1). The root cause is missing/incorrect nonce validation in the function custom_plugin_set_option , enabling Cross-Site Request Forgery (CSRF). By forged requests, unauthenticated attackers could update arb...

CVE-2025-30691

creationtimestamp| type| source ---|---|--- 2025-04-19 00:59:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12552 2025-05-10 17:41:14+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lotiff2hm22y 2025-05-11 02:21:13+00:00| seen|...