CVE-2025-22213

Inadequate checks in the Media Manager allowed users with "edit" privileges to change file extension to arbitrary extension, including .php and other potentially executable extensions...

CVE-2024-54085

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2025-29997

This vulnerability exists in the CAP back office application due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API request URL to gain unauthorized access to other user accounts...

CVE-2024-41055

creationtimestamp| type| source ---|---|--- 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-03 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

Creating Scripts to Identify Vulnerable SMTP Servers

This whitepaper covers how to create Nmap scripts to identify banners and versions of SMTP servers. It also covers methods to mitigate the public visibility of banners and version information on SMTP servers. Written in Portuguese...

CVE-2025-25293

creationtimestamp| type| source ---|---|--- 2025-03-12 20:42:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7368 2025-03-13 00:34:10+00:00| seen| https://t.me/cvedetector/20177 2025-03-14 22:06:13+00:00| seen|...

CVE-2025-27407

graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in GraphQL::Schema.fromintrospection or GraphQL::Schema::Loader.load can result in remote code...

CVE-2024-30620

creationtimestamp| type| source ---|---|--- 2025-03-12 17:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk74tl7rti2v 2025-03-12 17:41:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7355 2025-03-25 14:24:13+00:00| published-proof-of-concept|...

CVE-2025-2715

creationtimestamp| type| source ---|---|--- 2025-03-12 13:43:42+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lk6pmd3g2s2y 2025-03-24 23:23:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8568 2025-03-25 02:46:15+00:00| seen|...

Explaining External Network Assessment with Vector Command

Learn how external network assessment works within Vector Command, Rapid7’s continuous red team managed service. Understanding threat exposure management Let’s start by providing some context around where Vector Command fits into a security program and more specifically Continuous Threat Exposure...

CVE-2025-21857

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference tcfextsmisscookiebasealloc calls xaalloccyclic which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to...

CVE-2025-21846

In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when...

CVE-2024-58089

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double accounting race when btrfsrundelallocrange failed BUG When running btrfs with block size 4K smaller than page size 64K, aarch64, there is a very high chance to crash the kernel at generic/750, with the following...

CVE-2025-24912

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail...

CVE-2025-2231

creationtimestamp| type| source ---|---|--- 2025-03-12 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-129/ 2025-03-24 20:23:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8525 2025-03-24 22:35:04+00:00| seen| https://t.me/cvedetector/20992...

CVE-2025-2216

CVE-2025-2216 affects zzskzy Warehouse Refinement Management System 1.3. The vulnerable component is the UploadCrash function at /crash/log/SaveCrash.ashx, where manipulating the file parameter allows unrestricted remote upload. The vulnerability is described as critical and is publicly disclosed...

Microsoft Windows Multiple Vulnerabilities (KB5053594)

This host is missing an important security update according to Microsoft KB5053594 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-5359

creationtimestamp| type| source ---|---|--- 2025-03-11 22:00:06+00:00| seen| Telegram/fSuv2KpyfIksaa8qqgqv5fCpt00UzRfooou1l9gqHjc-A0g 2025-03-13 21:02:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lkbyl6ry552b 2025-11-08 03:00:05+00:00| published-proof-of-concept|...

CVE-2025-24201

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4...

CVE-2024-51319

creationtimestamp| type| source ---|---|--- 2025-03-11 17:37:47+00:00| seen| https://t.me/cvedetector/20099 2025-03-11 18:06:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4nsquby32h 2025-03-21 21:22:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8...