CVE-2025-1919

Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-1918

Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. Chromium security severity: Medium...

CVE-2025-27678

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001...

CVE-2025-27672

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6499 2025-03-05 08:34:50+00:00| seen| https://t.me/cvedetector/19597 2025-03-05 09:24:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuveikl22 2025-03-06...

CVE-2025-27681

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6490 2025-03-05 08:34:36+00:00| seen| https://t.me/cvedetector/19587 2025-03-06 12:00:28+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzt3i6j2g 2025-04-15...

CVE-2025-27682

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6489 2025-03-05 08:34:37+00:00| seen| https://t.me/cvedetector/19588 2025-03-06 12:00:29+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgztbv7d2e 2025-04-15...

CVE-2025-1919

Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-1316

Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device...

CVE-2025-27663

CVE-2025-27663 affects Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923, due to weak password encryption/encoding (OVE-20230524-0007). The vulnerability is associated with a 3.1 CVSS v3.1 base score of 9.8 (NETWORK, NO authentication, no user...

Linux Distros Unpatched Vulnerability : CVE-2022-23181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to...

CVE-2024-41147

An out-of-bounds write vulnerability exists in the madrflacdecodesampleslpc functionality of Miniaudio miniaudio v0.11.21. A specially crafted .flac file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2025-1938

Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 13...

CVE-2025-1930

On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape. This vulnerability affects Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...

CVE-2025-27111 Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection

Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences such as newline characters into the header, resulting in log injection. This vulnerability is fixed...

CVE-2025-22225

creationtimestamp| type| source ---|---|--- 2025-03-04 12:31:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6366 2025-03-04 13:00:28+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/114104285789301930 2025-03-04 13:37:08+00:00| seen|...

CVE-2025-27423

A flaw was found in the tar.vim plugin of Vim. This vulnerability allows arbitrary command execution via specially crafted tar archives that exploit the unsanitized :read ex command...

CVE-2025-27521

creationtimestamp| type| source ---|---|--- 2025-03-04 07:30:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6352 2025-03-04 09:58:51+00:00| seen| https://t.me/cvedetector/19475 2025-03-04 10:59:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp2zj372h 2025-08-18...

CVE-2025-22443

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read...

CVE-2025-20011

in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory...

MAL-2025-2058 Malicious code in buttonfactoryserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 158238f70853c391431a3c0e3b53d79d44970a0d956562c88324b2c1da5e08e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...