CVE-2025-24912

A flaw was found in hostapd. This vulnerability can allow an attacker to force RADIUS authentications to fail via crafted RADIUS packets injected between hostapd and the RADIUS server. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...

PT-2025-11348 · Undefined · Undefined

Four CVEs assigned: CVE-2025-2446 path traversal, CVE-2025-2439 GGUF parser read, CVE-2025-2445 Python-engine injection, CVE-2025-2447 missing CSRF...

CVE-2025-2320

creationtimestamp| type| source ---|---|--- 2025-03-14 23:06:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114163293011904157 2025-03-15 00:00:40+00:00| seen| Telegram/eCM4aHKdUiBHB9OwhsqXkdKvxoX4-6jxPypGuK3VSGlLfxU 2025-03-15 00:51:34+00:00| seen|...

CVE-2023-52927

In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nfctfindexpectation Currently nfconntrackin calling nfctfindexpectation will remove the exp from the hash table. However, in some scenario, we expect the exp not to be removed when the...

CVE-2025-29782

creationtimestamp| type| source ---|---|--- 2025-03-14 19:45:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7635 2025-03-14 20:53:36+00:00| seen| https://t.me/cvedetector/20327 2025-03-14 22:06:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkemn3vz7...

CVE-2025-25871

creationtimestamp| type| source ---|---|--- 2025-03-14 16:46:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qha63u24 2025-03-14 19:13:19+00:00| seen| https://t.me/cvedetector/20321...

CVE-2024-55594

creationtimestamp| type| source ---|---|--- 2025-03-14 16:44:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7591 2025-03-14 18:04:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114162103566286961 2025-03-14 19:13:13+00:00| seen| https://t.me/cvedetector/20318...

CVE-2023-52927

creationtimestamp| type| source ---|---|--- 2025-03-14 14:45:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7554 2025-03-14 16:42:29+00:00| seen| https://t.me/cvedetector/20296 2025-03-14 16:46:08+00:00| seen|...

CVE-2025-29030

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function...

CVE-2025-2304

creationtimestamp| type| source ---|---|--- 2025-03-14 13:40:23+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdqechp2b2a 2025-03-14 13:47:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7546 2025-03-14 15:02:35+00:00| seen|...

CVE-2025-21199

Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-21247

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...

Live Ransomware Demo: See How Hackers Breach Networks and Demand a Ransom

Cyber threats evolve daily. In this live webinar, learn exactly how ransomware attacks unfold—from the initial breach to the moment hackers demand payment. Join Joseph Carson, Delinea's Chief Security Scientist and Advisory CISO, who brings 25 years of enterprise security expertise. Through a liv...

CVE-2025-26163

creationtimestamp| type| source ---|---|--- 2025-03-14 05:50:16+00:00| seen| https://t.me/cvedetector/20262 2025-03-14 06:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkcyxin7ek2n...

Element Android security vulnerabilities

Element Android is an Android Matrix client for the open source Element. A security vulnerability exists in Element Android version 1.6.32 and earlier, which stems from a failure to logout a user when entering an incorrect PIN more than a configured number of times, which could lead to an attacke...

CVE-2025-1217

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME...

Ubuntu: Security Advisory (USN-7328-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-26706

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.07...

CVE-2025-28923

Cross-Site Request Forgery CSRF vulnerability in philippe No Disposable Email no-disposable-email allows Stored XSS.This issue affects No Disposable Email: from n/a through = 2.5.1...

CVE-2025-1651

creationtimestamp| type| source ---|---|--- 2025-03-13 19:48:26+00:00| seen| https://t.me/cvedetector/20245 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-157/ 2025-04-24 21:07:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13342...