CVE-2025-20636

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaont2rcx2p 2025-02-03 07:46:47+00:00| seen| https://t.me/cvedetector/17045 2025-02-03 08:03:46+00:00| seen|...

CVE-2025-20635

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09403752;...

CVE-2024-56946

Denial of service in DNS-over-QUIC in Technitium DNS Server = v13.2.2 allows remote attackers to permanently stop the server from accepting new DNS-over-QUIC connections by triggering unhandled exceptions in listener threads...

CVE-2024-53943

CVE-2024-53943 affects NRadio N8-180 NROS-1.9.2.n3.c5. The endpoint "/cgi-bin/luci/nradio/basic/radio" is vulnerable to XSS via the 2.4 GHz and 5 GHz name parameters, allowing an attacker to inject JavaScript into the SSID field that runs in the admin’s browser when they log in. Documented impact...

CVE-2024-57967

CVE-2024-57967 affects CyberArk Privileged Access Manager Self-Hosted (PVWA) prior to version 14.4. The issue, described across multiple sources, is a potential elevation of privileges linked to LDAP mapping within PVWA, with a CVSSv3.1 base score of 4.2 (Medium) and a network attack vector (high...

CVE-2025-0967

creationtimestamp| type| source ---|---|--- 2025-02-02 16:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh7gf2hujy2r 2025-02-02 19:13:53+00:00| seen| https://t.me/cvedetector/17029 2025-02-02 19:53:05+00:00| seen|...

CVE-2025-0949

creationtimestamp| type| source ---|---|--- 2025-02-01 19:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh57xyphjk2i 2025-02-01 21:26:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3780 2025-02-01 21:42:58+00:00| seen|...

CVE-2025-0944

creationtimestamp| type| source ---|---|--- 2025-02-01 13:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh4lufjtfq2i 2025-02-01 15:25:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3765 2025-02-01 15:37:40+00:00| seen|...

CVE-2024-12825

creationtimestamp| type| source ---|---|--- 2025-02-01 08:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433nwb6i2w 2025-02-01 09:26:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3748 2025-02-01 09:47:57+00:00| seen| https://t.me/cvedetector/17012...

CVE-2024-13371

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized arbitrary emails sending due to a missing capability check on the sendEmailToJobSeeker function in all versions up to, and including, 2.2.6. This makes it possible...

CVE-2024-12041

creationtimestamp| type| source ---|---|--- 2025-02-01 06:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ufoiklz2i 2025-02-01 07:16:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3721 2025-02-01 07:25:46+00:00| seen|...

BELL-CVE-2025-21669

Bulletin has no description...

CVE-2024-57433

creationtimestamp| type| source ---|---|--- 2025-01-31 22:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2zl535rs2t 2025-01-31 23:24:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3692 2025-02-01 01:16:23+00:00|...

CGA-P73V-QFXW-P8HG

Bulletin has no description...

CVE-2024-49339

creationtimestamp| type| source ---|---|--- 2025-01-31 17:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2isifgr42f 2025-01-31 19:34:15+00:00| seen| https://t.me/cvedetector/16959 2025-01-31 21:35:29+00:00| seen|...

CVE-2025-23215

PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing keys are included in jar published to Maven Central. The private key itself is not known to have been compromised itself, but given its passphrase is, it must also be considered...

CGA-7JQ3-HH6X-J4V2

Bulletin has no description...

CVE-2025-0930 Reflected Cross-Site Scripting (XSS) vulnerability in TeamCal Neo

Reflected Cross-Site Scripting XSS in TeamCal Neo, version 3.8.2. This allows an attacker to execute malicious JavaScript code, after injecting code via the ‘abs’ parameter in ‘/teamcal/src/index.php’...

CVE-2025-24831

creationtimestamp| type| source ---|---|--- 2025-01-31 13:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh23fzn2fq2f 2025-01-31 15:22:26+00:00| seen| https://t.me/cvedetector/16932 2025-02-01 17:28:09+00:00| seen|...

CVE-2025-21674

creationtimestamp| type| source ---|---|--- 2025-01-31 12:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzy3lf2pe2e 2025-01-31 15:22:42+00:00| seen| https://t.me/cvedetector/16945...