CVE-2025-24035

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2025-2229

CVE-2025-2229 affects Philips IntelliSpace Cardiovascular (ISCV) software. A token is created using the username, current date/time, and a fixed AES-128 encryption key that is identical across all installations, enabling token duplication across environments. Reported across Philips ISCV products...

CVE-2024-30143

creationtimestamp| type| source ---|---|--- 2025-03-13 17:44:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7442 2025-03-13 21:28:49+00:00| seen| https://t.me/cvedetector/20256 2025-03-13 22:36:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkc5tfijyn2w...

CVE-2025-22213

Inadequate checks in the Media Manager allowed users with "edit" privileges to change file extension to arbitrary extension, including .php and other potentially executable extensions...

CVE-2024-54085

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2025-29997

This vulnerability exists in the CAP back office application due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API request URL to gain unauthorized access to other user accounts...

CVE-2024-41055

creationtimestamp| type| source ---|---|--- 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-03 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

Creating Scripts to Identify Vulnerable SMTP Servers

This whitepaper covers how to create Nmap scripts to identify banners and versions of SMTP servers. It also covers methods to mitigate the public visibility of banners and version information on SMTP servers. Written in Portuguese...

CVE-2025-25293

creationtimestamp| type| source ---|---|--- 2025-03-12 20:42:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7368 2025-03-13 00:34:10+00:00| seen| https://t.me/cvedetector/20177 2025-03-14 22:06:13+00:00| seen|...

CVE-2025-27407

graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in GraphQL::Schema.fromintrospection or GraphQL::Schema::Loader.load can result in remote code...

CVE-2024-30620

creationtimestamp| type| source ---|---|--- 2025-03-12 17:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk74tl7rti2v 2025-03-12 17:41:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7355 2025-03-25 14:24:13+00:00| published-proof-of-concept|...

CVE-2025-2715

creationtimestamp| type| source ---|---|--- 2025-03-12 13:43:42+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lk6pmd3g2s2y 2025-03-24 23:23:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8568 2025-03-25 02:46:15+00:00| seen|...

Explaining External Network Assessment with Vector Command

Learn how external network assessment works within Vector Command, Rapid7’s continuous red team managed service. Understanding threat exposure management Let’s start by providing some context around where Vector Command fits into a security program and more specifically Continuous Threat Exposure...

CVE-2025-21857

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference tcfextsmisscookiebasealloc calls xaalloccyclic which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to...

CVE-2025-21846

In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when...

CVE-2024-58089

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double accounting race when btrfsrundelallocrange failed BUG When running btrfs with block size 4K smaller than page size 64K, aarch64, there is a very high chance to crash the kernel at generic/750, with the following...

CVE-2025-24912

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail...

CVE-2025-2231

creationtimestamp| type| source ---|---|--- 2025-03-12 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-129/ 2025-03-24 20:23:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8525 2025-03-24 22:35:04+00:00| seen| https://t.me/cvedetector/20992...

CVE-2025-2216

CVE-2025-2216 affects zzskzy Warehouse Refinement Management System 1.3. The vulnerable component is the UploadCrash function at /crash/log/SaveCrash.ashx, where manipulating the file parameter allows unrestricted remote upload. The vulnerability is described as critical and is publicly disclosed...

Microsoft Windows Multiple Vulnerabilities (KB5053594)

This host is missing an important security update according to Microsoft KB5053594 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...