9437 matches found
CVE-2025-29924
creationtimestamp| type| source ---|---|--- 2025-03-19 19:06:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114190659236671973 2025-03-19 20:00:51+00:00| published-proof-of-concept| Telegram/pKc-k4S4UpucBi-A8jZui2WxqHw-KLQAnPldAvhIPnjHqVQ 2025-03-19 20:18:15+00:00|...
CVE-2025-26475
creationtimestamp| type| source ---|---|--- 2025-03-19 18:43:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqtnbfvtu26 2025-03-19 18:49:29+00:00| seen| https://t.me/cvedetector/20652...
CVE-2025-30153
A flaw was found in kin-openapi. This vulnerability allows excessive memory consumption via upload of a crafted ZIP file a "ZIP bomb". Mitigation Disable any endpoints in your OpenAPI schema that allows multipart/form-data or allows the uploading of a zipfile...
CVE-2025-29783
A flaw was found in vLLM. In deployments where vLLM is configured to use Mooncake to distribute KV across hosts, this vulnerability allows remote code execution via unsafe deserialization exposed directly over ZMQ/TCP on all network interfaces. Mitigation A possible mitigation would be making...
CVE-2025-30196
CVE-2025-30196 concerns Jenkins AnchorChain Plugin 1.0. The vulnerability arises because the plugin does not restrict URL schemes in links created from workspace content, allowing the javascript: scheme and enabling stored XSS when an attacker can control the input file for the Anchor Chain post-...
CVE-2024-45644
creationtimestamp| type| source ---|---|--- 2025-03-19 14:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwtcfvj2l 2025-03-19 14:38:46+00:00| seen| https://t.me/cvedetector/20635...
CVE-2024-10442
CVE-2024-10442 affects Synology Replication Service and Synology Unified Controller (DSMUC). The vulnerability is an off-by-one error in the transmission component that can allow remote attackers to execute arbitrary code. Affected versions include Replication Service before 1.0.12-0066, 1.2.2-03...
CVE-2024-57151
creationtimestamp| type| source ---|---|--- 2025-03-18 20:48:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7994 2025-03-19 00:18:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkovvir5uy2m 2025-03-19 00:26:15+00:00| seen|...
CVE-2025-25042
creationtimestamp| type| source ---|---|--- 2025-03-18 19:48:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7980 2025-03-18 20:18:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihzz5jf26 2025-03-18 21:55:41+00:00| seen| https://t.me/cvedetector/20606...
CVE-2023-22514
This High severity RCE Remote Code Execution vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.8, and a CVSS Vector of: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H which allows an...
CVE-2025-25595
creationtimestamp| type| source ---|---|--- 2025-03-18 16:51:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7924 2025-03-18 20:15:02+00:00| seen| https://t.me/cvedetector/20591 2025-03-18 20:18:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihybkf...
CVE-2025-30115
creationtimestamp| type| source ---|---|--- 2025-03-18 14:50:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7917 2025-03-18 17:44:17+00:00| seen| https://t.me/cvedetector/20581 2025-03-18 18:13:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkobidgw6...
CVE-2025-30116
creationtimestamp| type| source ---|---|--- 2025-03-18 14:50:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7913 2025-03-18 17:44:18+00:00| seen| https://t.me/cvedetector/20582 2025-03-18 18:13:29+00:00| seen|...
CVE-2025-2339
A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public an...
CVE-2025-2494
creationtimestamp| type| source ---|---|--- 2025-03-18 11:55:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7901 2025-03-18 13:01:22+00:00| seen| Telegram/6cbUuW0XOy9-5cfzVYZy-1D70VP0VBBmnHLM6kTk1XKO28 2025-03-18 16:03:50+00:00| seen| https://t.me/cvedetector/20565 2025-03-18 16:13:23+00:0...
CVE-2025-0755
The various bsonappend functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size INT32MAX, resulting in a segmentation fault and possible application crash. This...
CVE-2025-25590
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml...
CVE-2025-25580
CVE-2025-25580 affects yimioa prior to v2024.07.04 and is a SQL injection vulnerability exposed via the listNameBySql() method in the /xml/UserMapper.xml. The entry indicates a local-privilege context with user interaction required and high confidentiality impact, but no exploit details or public...
CVE-2025-26125
creationtimestamp| type| source ---|---|--- 2025-03-17 21:39:41+00:00| seen| https://t.me/cvedetector/20511 2025-03-17 22:01:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkm5q7svb426 2025-05-12 06:38:07+00:00| published-proof-of-concept|...
