CVE-2025-1662 URL Media Uploader <= 1.0.0 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebinding

The URL Media Uploader plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.0 via the 'urlmediauploaderurlupload' action. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrar...

CVE-2024-13832

CVE-2024-13832 – Ultra Addons Lite for Elementor (WordPress) is confirmed in connected documents as an information disclosure vulnerability. It affects Ultra Addons Lite for Elementor

CVE-2025-21818

No description is available for this CVE...

CVE-2025-21809

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix peer hash locking vs RCU callback In its address list, afs now retains pointers to and refs on one or more rxrpcpeer objects. The address list is freed under RCU and at this time, it puts the refs on those peers...

CVE-2025-21813

In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connection Before attaching a new root to the old root, the children counter of the new root is checked to verify that only the upcoming CPU's top group have been connected to it. However...

BELL-CVE-2024-58005

Bulletin has no description...

CVE-2025-21808

In the Linux kernel, the following vulnerability has been resolved: net: xdp: Disallow attaching device-bound programs in generic mode Device-bound programs are used to support RX metadata kfuncs. These kfuncs are driver-specific and rely on the driver context to read the metadata. This means the...

CVE-2025-1744

Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before 5.9.9...

CVE-2025-21785

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions...

CVE-2025-23225

creationtimestamp| type| source ---|---|--- 2025-02-28 03:26:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5829 2025-02-28 05:19:13+00:00| seen| https://t.me/cvedetector/19116 2025-02-28 05:48:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7phjtrjw2t 2025-03-02...

CVE-2025-25726

creationtimestamp| type| source ---|---|--- 2025-02-28 02:45:47+00:00| seen| https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92 2025-08-19 18:29:28+00:00| seen| MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18...

CVE-2021-47631

In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there is a panic in da850evmconfigemac when booting multiv5defconfig in QEMU under the palmetto-bmc machine: Unable to handle kernel NULL pointer...

CVE-2025-1687

creationtimestamp| type| source ---|---|--- 2025-02-28 00:25:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5824 2025-02-28 01:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114078994955411295 2025-02-28 03:38:47+00:00| seen|...

CVE-2025-26326

A vulnerability was identified in the NVDA Remote version 2.6.4 and Tele NVDA Remote version 2025.3.3 remote connection add-ons, which allows an attacker to obtain total control of the remote system by guessing a weak password. The problem occurs because these add-ons accept any password entered ...

Debian dsa-5872 : xnest - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5872 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5872-1 [email protected] https://www.debian.org/securit...

CVE-2025-25728

creationtimestamp| type| source ---|---|--- 2025-02-27 23:25:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5813 2025-02-28 01:53:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccupfih2p 2025-02-28 03:38:49+00:00| seen| https://t.me/cvedetector/19...

CVE-2022-49249

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wc938x: fix accessing array out of bounds for enum type Accessing enums using integer would result in array out of bounds access on platforms like aarch64 where sizeoflong is 8 compared to enum size which is 4 bytes...

CVE-2025-25570

Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials...

CVE-2025-21824

creationtimestamp| type| source ---|---|--- 2025-02-27 21:58:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6v7yuwue27 2025-02-27 23:27:06+00:00| seen| https://t.me/cvedetector/19087...

CVE-2025-21784

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bail out when failed to load fw in pspinitcapmicrocode In function pspinitcapmicrocode, it should bail out when failed to load firmware, otherwise it may cause invalid memory access...