CVE-2025-3085

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...

Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2025-1325)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-27829

A security vulnerability was identified in Stormshield Network Security (SNS) 4.3.x versions prior to 4.3.35 . The flaw occurs when multicast streams are enabled on different interfaces, which can lead to the interruption of multicast traffic on certain interfaces. This issue may result in a deni...

CVE-2025-30427

creationtimestamp| type| source ---|---|--- 2025-03-31 23:31:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9793 2025-04-01 05:48:16+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114261130959029617 2025-04-01 05:48:16+00:00| seen|...

CVE-2025-3041 Project Worlds Online Time Table Generator updatestudent.php unrestricted upload

A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploi...

CVE-2025-31188

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to bypass Privacy preferences...

CVE-2025-30441

This issue was addressed through improved state management. This issue is fixed in Xcode 16.3. An app may be able to overwrite arbitrary files...

CVE-2025-24283

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data...

CVE-2025-24170

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges...

CVE-2025-24254

This vulnerability in macOS (specifically versions Ventura 13.7.5 , Sonoma 14.7.5 , and Sequoia 15.4 ) is caused by insufficient validation of symlinks . A local user may exploit this flaw to elevate privileges . Remediation is available through the official Apple security updates for the affecte...

CVE-2025-24278

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data...

CVE-2025-31191

This vulnerability exists in the Core Services framework on macOS, iOS, iPadOS, and tvOS . It stems from insufficient protection of service data within the GrantAccessToMultipleFiles interface, allowing an attacker to bypass App Sandbox protection mechanisms. Exploitation could enable unauthorize...

CVE-2025-24272

This vulnerability allows an app to potentially modify protected parts of the file system due to an improper access control issue. The flaw was addressed by Apple through improved checks in the following versions: macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura 13.7.5 . No specific e...

CVE-2025-24178

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24178

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24241

A configuration issue in macOS allows an application to trick a user into copying sensitive data to the pasteboard . This vulnerability affects macOS Ventura 13.7.5 , macOS Sonoma 14.7.5 , and macOS Sequoia 15.4 , where the issue has been addressed with additional restrictions. No specific exploi...

CVE-2025-24191

The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected parts of the file system...

CVE-2025-31123

creationtimestamp| type| source ---|---|--- 2025-03-31 20:31:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9764 2025-03-31 21:49:02+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114259246539821602 2025-03-31 21:49:02+00:00| seen|...

CVE-2025-21893

creationtimestamp| type| source ---|---|--- 2025-03-31 20:31:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9762 2025-03-31 21:09:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114259091334934490 2025-03-31 21:09:33+00:00| seen|...

CVE-2025-31124

Zitadel is open-source identity infrastructure software. ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. If enabled, ZITADEL will show the password prompt even if the user doesn't exist and report...