CVE-2025-22012

creationtimestamp| type| source ---|---|--- 2025-04-08 11:43:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114302162564110651 2025-04-08 14:00:01+00:00| seen| https://t.me/cvedetector/22449...

CVE-2025-29479

A flaw was found in the Hiredis library. This vulnerability allows a local attacker to cause a denial of service via crafted input data that triggers a heap buffer overflow during Redis command formatting. Mitigation Mitigation for this issue is either not available or the currently available...

CVE-2025-22017

In the Linux kernel, the following vulnerability has been resolved: devlink: fix xaalloccyclic error handling In case of returning 1 from xaalloccyclic wrapping ERRPTR1 will be returned, which will cause ISERR to be false. Which can lead to dereference not allocated pointer rel. Fix it by checkin...

CVE-2025-22016

In the Linux kernel, the following vulnerability has been resolved: dpll: fix xaalloccyclic error handling In case of returning 1 from xaalloccyclic wrapping ERRPTR1 will be returned, which will cause ISERR to be false. Which can lead to dereference not allocated pointer pin. Fix it by checking i...

CVE-2024-54092

creationtimestamp| type| source ---|---|--- 2025-04-08 09:40:27+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmc6mbtvbv2e 2025-04-08 11:48:22+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114302183113806542 2025-04-08 12:07:15+00:00| seen|...

CVE-2025-22015

In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or in swap cache, but not at the same time. Namely, once it is in swap cache, folio-mapping should be NULL, and the folio is no longer...

CVE-2024-41788

creationtimestamp| type| source ---|---|--- 2025-04-08 08:46:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10889 2025-04-08 09:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmc6m5lfpw2w 2025-04-08 11:48:18+00:00| seen|...

CVE-2025-27435

creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10867 2025-04-08 09:18:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5ecpojo2z 2025-04-08 11:29:19+00:00| seen| https://t.me/cvedetector/22429...

CVE-2025-27437

creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10866 2025-04-08 09:18:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5edx3km2i 2025-04-08 11:29:14+00:00| seen| https://t.me/cvedetector/22426...

CVE-2025-31333

creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10857 2025-04-08 09:18:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5eczqwo2u 2025-04-08 11:29:00+00:00| seen| https://t.me/cvedetector/22415...

CVE-2025-26654 Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud)

SAP Commerce Cloud Public Cloud does not allow to disable unencrypted HTTP port 80 entirely, but instead allows a redirect from port 80 to 443 HTTPS. As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request befor...

CVE-2025-29478

A flaw was found in Fluent Bit's YAML configuration parser. This vulnerability allows attackers to cause a heap use-after-free, potentially leading to denial of service via a crafted YAML input file. Mitigation Mitigation for this issue is either not available or the currently available options d...

CVE-2024-47261

51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device...

CVE-2025-20946

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without user interaction...

CVE-2025-20945

Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch...

CVE-2025-3403

creationtimestamp| type| source ---|---|--- 2025-04-08 03:45:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10826 2025-04-08 05:17:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmbpwoibbn2i 2025-04-08 08:08:09+00:00| seen|...

CVE-2025-2525 Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Upload

The Streamit theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'stAuthenticationController::editprofile' function in all versions up to, and including, 4.0.1. This makes it possible for authenticated attackers, with subscriber-level and above...

CVE-2025-3385 LinZhaoguan pb-cms Classification Management Page cross site scripting

A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Classification Management Page. The manipulation of the argument Classification name leads to cross site scripting. The attack can ...

CVE-2025-29482

creationtimestamp| type| source ---|---|--- 2025-04-07 19:45:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10766 2025-04-07 22:55:51+00:00| seen| https://t.me/cvedetector/22349 2025-05-02 21:10:10+00:00| seen|...

CVE-2025-21436

creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:08+00:00| seen| Telegram/kIPmulmvyHHjtgmA-h6LkG8Qr-d4gjpjh169EvqvyP4-4Q 2025-04-07 14:45:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10705 2025-04-07 15:07:11+00:00| seen|...