The vulnerability of the MFlash secure data exchange platform lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the MFlash secure messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the administration panel by injecting specially crafted HTML code...

The vulnerability of the MFlash secure data exchange platform lies in its insufficient authentication attempt limitation, which allows a perpetrator to gain unauthorized access to the platform.

The vulnerability of the MFlash secure messaging platform is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the platform...

CVE-2025-27773

creationtimestamp| type| source ---|---|--- 2025-03-11 19:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114145527842239250 2025-03-11 20:21:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7223 2025-03-11 20:46:20+00:00| seen|...

DEBIAN-CVE-2025-24201

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4...

CVE-2025-24201

CVE-2025-24201 is a WebKit/WebKitGTK issue described in connected advisories as an out-of-bounds write that allowed breaking out of the Web Content sandbox. Root cause: out-of-bounds write in WebKit. Impact: potential sandbox breakout affecting Apple WebKit-based products (Safari, iOS/iPadOS 18.x...

CVE-2025-24035

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:40:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114145022545782390 2025-03-11 17:48:34+00:00| seen|...

CVE-2025-24045

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:40:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114145022545782390 2025-03-11 17:48:34+00:00| seen|...

CVE-2025-26645

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:23:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144954235534498 2025-03-11 17:40:22+00:00| seen|...

The vulnerability of the LaunchServices service in operating systems such as macOS, iOS, iPadOS, tvOS, and watchOS allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the LaunchServices service in operating systems such as macOS, iOS, iPadOS, tvOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...

Security Advisory 0112

Security Advisory 0112 . CSAF PDF Date: March 11, 2025 Revision | Date | Changes ---|---|--- 1.0 | March 11, 2025 | Initial release The CVE-ID tracking this issue: CVE-2024-9448 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Common Weakness Enumeration: CWE-284 Improper...

SAP Commerce 跨站脚本漏洞

SAP Commerce is a set of cloud-based e-commerce platforms from Germany's SAP. It supports sales management, marketing management, order management, and operations management. A cross-site scripting vulnerability exists in SAP Commerce that stems from insufficient input validation and could lead t...

CVE-2025-27610

creationtimestamp| type| source ---|---|--- 2025-03-10 22:40:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7074 2025-03-11 00:54:04+00:00| seen| https://t.me/cvedetector/20000 2025-03-11 04:41:13+00:00| seen| Telegram/HMAWwcay4hklj3BM91LAZxDwOui412reXuT0Q0CnkrnI9Zt...

CVE-2025-2135

creationtimestamp| type| source ---|---|--- 2025-03-10 21:51:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114140348492064450 2025-03-10 23:13:36+00:00| seen| https://t.me/cvedetector/19984 2025-03-10 23:51:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2qmpalcz...

CVE-2022-43454

A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-44192

The issue was addressed with improved checks. This issue is fixed in watchOS 11, macOS Sequoia 15, Safari 18, visionOS 2, iOS 18 and iPadOS 18, tvOS 18. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2024-44227

The issue was addressed with improved memory handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2025-24813

creationtimestamp| type| source ---|---|--- 2025-03-10 17:14:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lk22hs7zke24 2025-03-10 17:38:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7027 2025-03-10 17:45:38+00:00| seen|...

Over 1000 Malicious Packages Found Exploiting Open-Source Platforms

Over 1,000 malicious packages found using low file counts, suspicious installs, and hidden APIs. Learn key detection methods…...

CVE-2024-13918

creationtimestamp| type| source ---|---|--- 2025-03-10 10:39:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6989 2025-03-10 11:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhrxmaoz2h 2025-03-10 11:48:30+00:00| seen|...

CVE-2025-27253

creationtimestamp| type| source ---|---|--- 2025-03-10 09:41:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6987 2025-03-10 11:40:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhryj5on2l 2025-03-10 12:21:00+00:00| seen| https://t.me/cvedetector/19949 2025-03-10...