CVE-2025-26042

Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack...

CVE-2025-2344

creationtimestamp| type| source ---|---|--- 2025-03-16 18:46:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7719 2025-03-16 20:33:24+00:00| seen| https://t.me/cvedetector/20414 2025-03-16 21:35:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkjlu332f...

CVE-2025-2342

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-2340

creationtimestamp| type| source ---|---|--- 2025-03-16 13:49:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7710 2025-03-16 16:22:34+00:00| seen| https://t.me/cvedetector/20409 2025-03-16 17:30:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkj65mttn...

CVE-2025-2337

creationtimestamp| type| source ---|---|--- 2025-03-16 09:50:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7708 2025-03-16 11:26:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkijshklcg26 2025-03-16 11:30:14+00:00| published-proof-of-concept|...

CVE-2025-24856

An issue was discovered in the oidc aka OpenID Connect Authentication extension before 4.0.0 for TYPO3. The account linking logic allows a pre-hijacking attack, leading to Account Takeover. The attack can only be exploited if the following requirements are met: 1 an attacker can anticipate the...

CVE-2024-58103

Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt...

CVE-2025-25871

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...

CVE-2025-30022

CM Soluces Informatica Ltda Auto Atendimento 1.x.x was discovered to contain a SQL injection via the DATANASC parameter...

CVE-2025-30077

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits...

CVE-2025-30089

The CVE-2025-30089 entry applies to gurk (aka gurk-rs) up to version 0.6.3, which is reported to mishandle ANSI escape sequences. The vulnerability is described with a base CVSS v3.1 score of 5.4 (Network attack vector, high attack complexity, no privileges, no user interaction, scope Changed, Co...

CVE-2025-26875

creationtimestamp| type| source ---|---|--- 2025-03-15 23:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114169120894617970 2025-03-16 02:09:48+00:00| seen| https://t.me/cvedetector/20390 2025-03-16 11:00:06+00:00| seen|...

CVE-2025-26921

Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through = 2.2.6...

CVE-2025-25225

A privilege escalation vulnerability in the Hikashop component versions 1.0.0-5.1.3 for Joomla allows authenticated attackers administrator to escalate their privileges to Super Admin Permissions...

CVE-2025-2263

During login to the web server in "Sante PACS Server.exe", OpenSSL function EVPDecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or...

CVE-2025-1057

CVE-2025-1057 affects Keylime (registrar) where a change in database type handling introduced in version 7.12.0 prevents reading prior-version entries (e.g., 7.11.0) because older data is stored as bytes while the registrar now expects strings. This mismatch can trigger an error/exceptions during...

CVE-2025-1667

creationtimestamp| type| source ---|---|--- 2025-03-15 03:48:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7654 2025-03-15 04:56:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkfdky3y232m 2025-03-15 05:00:17+00:00| seen|...

CVE-2025-24912

A flaw was found in hostapd. This vulnerability can allow an attacker to force RADIUS authentications to fail via crafted RADIUS packets injected between hostapd and the RADIUS server. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...

PT-2025-11348 · Undefined · Undefined

Four CVEs assigned: CVE-2025-2446 path traversal, CVE-2025-2439 GGUF parser read, CVE-2025-2445 Python-engine injection, CVE-2025-2447 missing CSRF...

CVE-2025-2320

creationtimestamp| type| source ---|---|--- 2025-03-14 23:06:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114163293011904157 2025-03-15 00:00:40+00:00| seen| Telegram/eCM4aHKdUiBHB9OwhsqXkdKvxoX4-6jxPypGuK3VSGlLfxU 2025-03-15 00:51:34+00:00| seen|...