CVE-2025-0893

creationtimestamp| type| source ---|---|--- 2025-02-19 20:01:07+00:00| seen| Telegram/oQVpewWkvKBKUQ-rRdVr10GCle5O0Tfmf5rIV9EWW1t8XYM 2025-02-19 20:24:48+00:00| seen| https://t.me/cvedetector/18448 2025-02-19 22:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrwsoxpe2a...

CVE-2025-0677

CVE-2025-0677 describes a heap-based out-of-bounds write in GRUB2’s UFS symlink handling. The bug: during a symlink lookup, GRUB2 may allocate a buffer based on inode data size without validating that the symlink data size hasn’t overflowed, causing grub_malloc() to under-allocate. Subsequent dis...

CVE-2025-24965

creationtimestamp| type| source ---|---|--- 2025-02-19 18:00:38+00:00| published-proof-of-concept| Telegram/2BvzDhkAvypO7mGv4Hm3zZ8Jlh39uY-jml8MP6LdNmQUR4 2025-02-19 18:06:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likej7z4zu23 2025-02-19 20:24:58+00:00| seen|...

CVE-2025-0633

A flaw was found in iniparser. This vulnerability allows an attacker to read out-of-bound memory via iniparserdumpsectionini. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use an...

CVE-2024-13336

creationtimestamp| type| source ---|---|--- 2025-02-19 09:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijgtigepz2i 2025-02-19 12:03:03+00:00| seen| https://t.me/cvedetector/18419 2025-02-19 15:39:53+00:00| seen|...

CVE-2024-13674

creationtimestamp| type| source ---|---|--- 2025-02-19 08:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdkbnapc2t 2025-02-19 08:41:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4793 2025-02-19 12:01:18+00:00| seen|...

CVE-2024-13591

creationtimestamp| type| source ---|---|--- 2025-02-19 08:16:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdjvfwbk2i 2025-02-19 08:40:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4782 2025-02-19 15:39:52+00:00| seen|...

CVE-2024-13405

creationtimestamp| type| source ---|---|--- 2025-02-19 08:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdinatct2t 2025-02-19 08:40:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4779 2025-02-19 15:39:51+00:00| seen|...

CVE-2024-12069

creationtimestamp| type| source ---|---|--- 2025-02-19 08:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdidpgu32t 2025-02-19 08:41:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4792 2025-02-19 15:39:51+00:00| seen|...

CVE-2024-11753

creationtimestamp| type| source ---|---|--- 2025-02-19 08:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdi5xvht2y 2025-02-19 08:41:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4786 2025-02-19 15:39:51+00:00| seen|...

CVE-2024-13854

The Education Addon for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.1 via the naeduelementortemplate shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wit...

CVE-2024-13657 Store Locator Widget <= 2025r1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Store Locator Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'storelocatorwidget' shortcode in all versions up to, and including, 2025r1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2025-1447

creationtimestamp| type| source ---|---|--- 2025-02-19 03:09:26+00:00| seen| Telegram/eVW0SDeapKbyz3DaIi28cB3jh41KTy7RDpdKBCqZ8gmHSfgB 2025-02-19 03:41:39+00:00| seen| https://t.me/cvedetector/18397 2025-02-19 04:01:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liivcbgabk2m...

CVE-2024-57262

creationtimestamp| type| source ---|---|--- 2025-02-19 02:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liipelzwma23 2025-02-19 05:21:59+00:00| seen| https://t.me/cvedetector/18400 2025-02-19 06:01:49+00:00| seen|...

CVE-2025-1447 kasuganosoras Pigeon index.php server-side request forgery

A vulnerability was found in kasuganosoras Pigeon 1.0.177. It has been declared as critical. This vulnerability affects unknown code of the file /pigeon/imgproxy/index.php. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. Upgrading t...

CVE-2025-25947

CVE-2025-25947 affects Bento4 v1.6.0-641, where a segmentation fault can be triggered by crafted MP4 input in AP4_AtomParent::RemoveChild invoked during mp4encrypt. The vulnerability is tied to Bento4’s Ap4Atom.cpp handling. Connected sources confirm the affected version and function, but do not ...

CVE-2025-25474

DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h...

CVE-2025-25469

creationtimestamp| type| source ---|---|--- 2025-02-18 22:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxodhz423 2025-02-20 01:27:45+00:00| seen| Telegram/fLCF0hsKd5w5udLM45RH3dVf2OoO74QdCzK602W7HVsGWnMB 2025-08-28 13:38:59+00:00| seen|...

CVE-2025-25467

creationtimestamp| type| source ---|---|--- 2025-02-18 22:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxj7wx323 2025-02-19 16:21:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lik6nbpjww2a 2025-02-19 17:49:01+00:00| seen|...