CVE-2024-13881

creationtimestamp| type| source ---|---|--- 2025-03-20 06:18:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8171 2025-03-20 09:02:17+00:00| seen| https://t.me/cvedetector/20696 2025-03-20 09:03:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomb2ac2m...

CVE-2025-1314

CVE-2025-1314 (Custom Twitter Feeds – A Tweets Widget or X Feed Widget for WordPress) is a CSRF vulnerability present in all versions up to and including 2.2.5. The root cause is missing or incorrect nonce validation in the ctf_clear_cache_admin() function, enabling unauthenticated attackers to r...

CVE-2025-27779

creationtimestamp| type| source ---|---|--- 2025-03-19 23:00:33+00:00| published-proof-of-concept| https://t.me/cvedetector/20680 2025-03-20 00:49:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2jo34k2j...

CVE-2025-27782

creationtimestamp| type| source ---|---|--- 2025-03-19 23:00:21+00:00| seen| https://t.me/cvedetector/20672 2025-03-19 23:33:39+00:00| published-proof-of-concept| Telegram/e8K6ei2MJobaYeBw9lEyjrqpWhjWmsfq7ceAEPONUHatpcs 2025-03-20 00:49:11+00:00| seen|...

CVE-2025-29924

creationtimestamp| type| source ---|---|--- 2025-03-19 19:06:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114190659236671973 2025-03-19 20:00:51+00:00| published-proof-of-concept| Telegram/pKc-k4S4UpucBi-A8jZui2WxqHw-KLQAnPldAvhIPnjHqVQ 2025-03-19 20:18:15+00:00|...

CVE-2025-26475

creationtimestamp| type| source ---|---|--- 2025-03-19 18:43:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqtnbfvtu26 2025-03-19 18:49:29+00:00| seen| https://t.me/cvedetector/20652...

CVE-2025-30153

A flaw was found in kin-openapi. This vulnerability allows excessive memory consumption via upload of a crafted ZIP file a "ZIP bomb". Mitigation Disable any endpoints in your OpenAPI schema that allows multipart/form-data or allows the uploading of a zipfile...

CVE-2025-29783

A flaw was found in vLLM. In deployments where vLLM is configured to use Mooncake to distribute KV across hosts, this vulnerability allows remote code execution via unsafe deserialization exposed directly over ZMQ/TCP on all network interfaces. Mitigation A possible mitigation would be making...

CVE-2025-30196

The Jenkins AnchorChain Plugin 1.0 is vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is the lack of validation for URL schemes when the plugin generates links based on workspace content, specifically allowing the javascript: scheme. Attackers who can control the i...

CVE-2024-45644

creationtimestamp| type| source ---|---|--- 2025-03-19 14:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwtcfvj2l 2025-03-19 14:38:46+00:00| seen| https://t.me/cvedetector/20635...

CVE-2024-10442

CVE-2024-10442 affects Synology Replication Service and Synology Unified Controller (DSMUC). The vulnerability is an off-by-one error in the transmission component that can allow remote attackers to execute arbitrary code. Affected versions include Replication Service before 1.0.12-0066, 1.2.2-03...

CVE-2024-57151

creationtimestamp| type| source ---|---|--- 2025-03-18 20:48:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7994 2025-03-19 00:18:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkovvir5uy2m 2025-03-19 00:26:15+00:00| seen|...

CVE-2025-25042

creationtimestamp| type| source ---|---|--- 2025-03-18 19:48:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7980 2025-03-18 20:18:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihzz5jf26 2025-03-18 21:55:41+00:00| seen| https://t.me/cvedetector/20606...

CVE-2023-22514

This High severity RCE Remote Code Execution vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.8, and a CVSS Vector of: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H which allows an...

CVE-2025-25595

creationtimestamp| type| source ---|---|--- 2025-03-18 16:51:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7924 2025-03-18 20:15:02+00:00| seen| https://t.me/cvedetector/20591 2025-03-18 20:18:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihybkf...

CVE-2025-30115

creationtimestamp| type| source ---|---|--- 2025-03-18 14:50:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7917 2025-03-18 17:44:17+00:00| seen| https://t.me/cvedetector/20581 2025-03-18 18:13:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkobidgw6...

CVE-2025-30116

creationtimestamp| type| source ---|---|--- 2025-03-18 14:50:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7913 2025-03-18 17:44:18+00:00| seen| https://t.me/cvedetector/20582 2025-03-18 18:13:29+00:00| seen|...

CVE-2025-2339

A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public an...

CVE-2025-2494

creationtimestamp| type| source ---|---|--- 2025-03-18 11:55:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7901 2025-03-18 13:01:22+00:00| seen| Telegram/6cbUuW0XOy9-5cfzVYZy-1D70VP0VBBmnHLM6kTk1XKO28 2025-03-18 16:03:50+00:00| seen| https://t.me/cvedetector/20565 2025-03-18 16:13:23+00:0...

CVE-2025-0755

The various bsonappend functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size INT32MAX, resulting in a segmentation fault and possible application crash. This...