CVE-2025-2874

creationtimestamp| type| source ---|---|--- 2025-04-03 07:34:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10174 2025-04-03 11:03:12+00:00| seen| https://t.me/cvedetector/21954 2025-04-03 11:12:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvrfdmhxf24...

CVE-2025-3144

creationtimestamp| type| source ---|---|--- 2025-04-03 06:34:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10168 2025-04-03 07:06:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvdotogbl2z 2025-04-03 09:22:45+00:00| seen|...

CVE-2025-3146

CVE-2025-3146 concerns the PHPGurukul Bus Pass Management System v1.0, where an SQL injection is triggered through the viewid parameter in /view-pass-detail.php. Multiple connected sources (CNVD/CNNVD/NVD/CVE records and CVE-list) confirm remote exploitability and public disclosure, giving attack...

[SECURITY] Fedora 40 Update: suricata-7.0.10-1.fc40

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

CVE-2025-2784 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server...

[SECURITY] Fedora 41 Update: suricata-7.0.10-1.fc41

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

Intelbras WRN 150 代码注入漏洞

The Intelbras WRN 150 is a wireless router from Intelbras Brazil. A code injection vulnerability exists in the Intelbras WRN 150 version 1.0.15ptITB01, which stems from the fact that incorrect manipulation of the parameter SSID by the wireless menu component can lead to cross-site scripting attac...

CVE-2025-26818

Netwrix Password Secure through 9.2 allows command injection...

CVE-2025-3039

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addemployee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-30455

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information...

CVE-2025-29063

creationtimestamp| type| source ---|---|--- 2025-04-02 23:01:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lluiku77ef2x 2025-04-03 01:01:38+00:00| seen| https://t.me/cvedetector/21929 2025-04-03 17:48:24+00:00| seen|...

CVE-2025-31182

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to delete files for which it does not have permission...

CVE-2025-2704

creationtimestamp| type| source ---|---|--- 2025-04-02 21:34:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10146 2025-04-02 22:08:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114270646699167048 2025-04-02 22:08:14+00:00| seen|...

CVE-2025-31479

creationtimestamp| type| source ---|---|--- 2025-04-02 21:34:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10144 2025-04-02 22:04:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114270632021246470 2025-04-02 22:04:31+00:00| seen|...

CVE-2025-30080

Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service software abort...

CVE-2025-31477 Improper Scope Validation in the open Endpoint of tauri-plugin-shell

The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener e.g. xdg-open on Linux. This was...

CVE-2025-21994

creationtimestamp| type| source ---|---|--- 2025-04-02 17:02:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lltuidwrgw2e 2025-04-02 19:10:05+00:00| seen| https://t.me/cvedetector/21886...

CVE-2024-36337

Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, integrity or availability...

CVE-2025-21990

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo-tbo.resource will be NULL. Check for that before dereferencing. cherry picked from commit...

CVE-2025-21988

In the Linux kernel, the following vulnerability has been resolved: fs/netfs/readcollect: add to next-prevdonated If multiple subrequests donate data to the same "next" request depending on the subrequest completion order, each of them would overwrite the prevdonated field, causing data corruptio...