CVE-2025-27829

CVE-2025-27829 affects Stormshield Network Security (SNS) 4.3.x prior to 4.3.35. The issue arises when multicast streams are enabled on different interfaces, allowing interruption of multicast traffic on some interfaces and resulting in a denial of the multicast routing service on the firewall. A...

CVE-2025-3085

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...

Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2025-1325)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-30427

creationtimestamp| type| source ---|---|--- 2025-03-31 23:31:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9793 2025-04-01 05:48:16+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114261130959029617 2025-04-01 05:48:16+00:00| seen|...

CVE-2025-3041 Project Worlds Online Time Table Generator updatestudent.php unrestricted upload

A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploi...

CVE-2025-31188

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to bypass Privacy preferences...

CVE-2025-30441

This issue was addressed through improved state management. This issue is fixed in Xcode 16.3. An app may be able to overwrite arbitrary files...

CVE-2025-24283

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data...

CVE-2025-24170

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges...

CVE-2025-24254

CVE-2025-24254 affects macOS, with fixes in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. The underlying issue is improved validation of symlinks, addressing a potential privilege-escalation vector. Remediation is to apply the listed OS updates; exploitation details are not p...

CVE-2025-24278

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data...

CVE-2025-31191

CVE-2025-31191 is a macOS sandbox escape vulnerability fixed in Apple security updates (Ventura 13.7.5, Sequoia 15.4, Sonoma 14.7.5, iOS 18.4, etc.). The connected Microsoft threat research details a sandbox-escape chain abusing security-scoped bookmarks and the keychain. Attackers could leverage...

CVE-2025-24272

Summary: CVE-2025-24272 affects macOS where an app may modify protected parts of the file system. The issue was addressed with improved checks and is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. The public sources indicate Apple updates released to remediate this vu...

CVE-2025-24178

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24178

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24241

The CVE-2025-24241 issue is a configuration-related vulnerability affecting macOS, fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. It describes a way an app may deceive a user into copying sensitive data to the pasteboard. The core detail provided is a configuration is...

CVE-2025-24191

The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected parts of the file system...

CVE-2025-31123

creationtimestamp| type| source ---|---|--- 2025-03-31 20:31:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9764 2025-03-31 21:49:02+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114259246539821602 2025-03-31 21:49:02+00:00| seen|...

CVE-2025-21893

creationtimestamp| type| source ---|---|--- 2025-03-31 20:31:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9762 2025-03-31 21:09:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114259091334934490 2025-03-31 21:09:33+00:00| seen|...

CVE-2025-31124

Zitadel is open-source identity infrastructure software. ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. If enabled, ZITADEL will show the password prompt even if the user doesn't exist and report...