CVE-2025-22077

In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts commit e9f2517a3e18a54a3943c098d2226b245d488801. Commit e9f2517a3e18 "smb: client: fix TCP timers deadlock after rmmod" is intended to fix a null-ptr-deref in...

CVE-2025-0467

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

CVE-2025-31147

Unauthenticated attackers can query information about total energy consumed by EV chargers of arbitrary users...

CVE-2025-29451

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12372 2025-04-17 22:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pajc52y 2025-04-18 00:41:40+00:00| seen|...

CVE-2025-29453

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12365 2025-04-17 22:53:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274q7dzc2l 2025-04-18 03:12:18+00:00| seen| https://t.me/cvedetector/23300...

CVE-2025-29449

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function...

CVE-2025-25455

creationtimestamp| type| source ---|---|--- 2025-04-17 17:57:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12291 2025-04-17 18:54:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqxopnf2q 2025-04-17 23:01:10+00:00| seen|...

WordPress Avatar plugin <= 0.1.4 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by theviper17y in WordPress Plugin Avatar versions = 0.1.4...

CVE-2025-23132

In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix to avoid warning in dquotwritebackdquots F2FS-fs dm-59: checkpoint=enable has some unwritten data. ------------ cut here ------------ WARNING: CPU: 6 PID: 8013 at fs/quota/dquot.c:691...

CVE-2025-39596

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:59+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325715470592 2025-04-17 18:24:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3csmwi2g 2025-04-17 20:30:28+00:00| seen|...

CVE-2025-43015

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:59+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325777103450 2025-04-17 17:57:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12305 2025-04-17 18:24:25+00:00| seen|...

CVE-2025-39526

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325296030508...

CVE-2025-22089

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Don't expose hwcounters outside of init net namespace Commit 467f432a521a "RDMA/core: Split port and device counter sysfs attributes" accidentally almost exposed hw counters to non-init net namespaces. It didn't expose...

CVE-2025-23958

Missing Authorization vulnerability in FADI MED Editor Wysiwyg Background Color editor-wysiwyg-background-color allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Editor Wysiwyg Background Color: from n/a through = 1.0...

CVE-2025-24737 WordPress WP Helper Premium plugin <= 4.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Helper Premium: from n/a through = 4.6.1...

CVE-2025-27292 WordPress WPYog Documents Plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PoppinsDigital.com WPYog Documents wpyog-documents allows Reflected XSS.This issue affects WPYog Documents: from n/a through = 1.3.5...

CVE-2025-39519 WordPress Bulk Page Stub Creator plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in runthings.dev Bulk Page Stub Creator bulk-page-stub-creator allows Reflected XSS.This issue affects Bulk Page Stub Creator: from n/a through = 1.1...

CVE-2025-39558 WordPress CRM Perks plugin <= 1.1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CRM Perks CRM Perks support-x allows Reflected XSS.This issue affects CRM Perks: from n/a through = 1.1.7...

CVE-2025-22105

In the Linux kernel, the following vulnerability has been resolved: bonding: check xdp prog when set bond mode Following operations can trigger a warning1: ip netns add ns1 ip netns exec ns1 ip link add bond0 type bond mode balance-rr ip netns exec ns1 ip link set dev bond0 xdp obj afxdpkern.o se...

CVE-2025-39429 WordPress Széchenyi 2020 Logo <= 1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Földesi, Mihály Széchenyi 2020 Logo szechenyi-2020-logo allows PHP Local File Inclusion.This issue affects Széchenyi 2020 Logo: from n/a through = 1.1...