CVE-2025-24992

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 20:06:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4ujkqaxr2n 2025-03-11 20:08:41+00:00| seen|...

CVE-2025-24055

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-31 02:30:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9566 2026-08-04 13:00:26+00:00| seen| https://t.me/bagl3ynotes/141...

CVE-2025-2192

creationtimestamp| type| source ---|---|--- 2025-03-11 14:05:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4af5u2w42m 2025-03-11 15:57:14+00:00| seen| https://t.me/cvedetector/20083...

Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2024-11187 DESCRIPTION: It is possible to construct a zone such that some queries ...

CVE-2025-25266

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 All versions V2302.0021, Tecnomatix Plant Simulation V2404 All versions V2404.0010. The affected application does not properly restrict access to the file deletion functionality. This could allow an unauthorized attacker to...

CVE-2025-27395

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality. This could allow an authenticated highly-privileged remote attacker to read and...

CVE-2025-23397

CVE-2025-23397 affects Siemens Teamcenter Visualization and Tecnomatix Plant Simulation. A memory corruption bug occurs while parsing WRL files, enabling code execution in the current process. Affected versions include Teamcenter Visualization: < V14.3.0.13, < V2312.0009, < V2406.0007, &...

CVE-2025-2175

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function vbistrndupiconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to...

CVE-2024-13862

The S3Bubble Media Streaming WordPress plugin (versions through 8.0 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape a parameter before outputting it back to the page. This flaw could be exploited to target high-privilege user...

CVE-2025-26660 Broken Access Control in SAP Fiori apps (Posting Library)

SAP Fiori applications using the posting library fail to properly configure security settings during the setup process, leaving them at default or inadequately defined. This vulnerability allows an attacker with low privileges to bypass access controls within the application, enabling them to...

CVE-2025-2174

A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbistrndupiconvucs2 of the file src/conv.c. The manipulation of the argument srclength leads to integer overflow. The attack can be launched remotely. The exploit...

CVE-2025-24993

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2024-54467

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...

CVE-2025-22603

CVE-2025-22603 affects AutoGPT platform prior to autogpt-platform-beta-v0.4.2. The vulnerability is in the Send Web Request component where IPv6 addresses are not restricted or filtered, enabling a server-side request forgery (SSRF) to visit an IPv6 service. The issue is addressed in autogpt-plat...

CVE-2025-25616

creationtimestamp| type| source ---|---|--- 2025-03-10 14:38:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7000 2025-03-10 15:40:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7jbtiz2j 2025-03-10 16:31:53+00:00| seen|...

CVE-2025-2148

CVE-2025-2148 : PyTorch 2.6.0+cu124 contains a vulnerability affecting torch.ops.profiler._call_end_callbacks_on_jit_fut in the Tuple Handler. Manipulating the argument None can cause memory corruption. The report notes a remote attack with high impact and high attack complexity; no explicit reme...

CVE-2025-2023

creationtimestamp| type| source ---|---|--- 2025-03-10 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-122/...

CVE-2025-2015

creationtimestamp| type| source ---|---|--- 2025-03-10 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-116/...

CVE-2025-2022

creationtimestamp| type| source ---|---|--- 2025-03-10 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-126/...

CVE-2025-25940

VisiCut version 2.1 is vulnerable to code execution due to Insecure XML Deserialization (CWE-502) within the loadPlfFile method of VisicutModel.java. This flaw allows an attacker to execute arbitrary code on the system. As a mitigation, it is recommended to restrict the use of the loadPlfFile met...