CERTFR-2025-ACT-025

creationtimestamp| type| source ---|---|--- 2025-06-17 08:16:45+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lrs2l2i5hk2f 2025-06-17 08:16:47+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114697712697106433...

CVE-2025-49877: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Server Side Request Forgery.This issue affects ProfileGrid : from n/a through = 5.9.5.2...

Astra Linux – Vulnerability in Chromium

Before version 134.0.6998.35, using “After Free” in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

CVE-2025-5748

creationtimestamp| type| source ---|---|--- 2025-06-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-327/ 2025-06-06 17:07:50+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lqxd4fmsis2l 2025-06-06 17:07:52+00:00| seen|...

CVE-2025-5597

creationtimestamp| type| source ---|---|--- 2025-06-04 12:40:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrt5xayz5g2 2025-06-04 12:47:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrtmrqoro2e...

CVE-2025-5521

creationtimestamp| type| source ---|---|--- 2025-06-03 19:28:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpzkbrik562 2025-06-03 21:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqq7nkela42e...

CVE-2025-46154

creationtimestamp| type| source ---|---|--- 2025-06-03 14:52:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpk5yt7fmy2 2025-06-03 16:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpohjrmsn2m...

CVE-2024-52561

creationtimestamp| type| source ---|---|--- 2025-06-03 10:00:05+00:00| seen| https://infosec.place/objects/a791cbb1-ae89-402d-9b00-b1a0bea46240 2025-06-03 10:06:06+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lqp25ovz6r2p 2025-06-03 10:23:14+00:00| seen|...

📄 Microsoft Windows Registry Protection Removal

Thanks to OFFREG.dll, every unprivileged user can copy the registry tree HKEYCURRENTUSER except of course the registry keys where the policies are stored to an offline registry hive ntuser.man and thus get rid of any restrictions previously imposed via user group policies after logging off and on...

CVE-2025-20678

creationtimestamp| type| source ---|---|--- 2025-06-02 04:05:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqlvjyvabm62 2025-06-02 04:38:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqlxf3wy3z2k 2025-06-02...

CVE-2025-40908

creationtimestamp| type| source ---|---|--- 2025-06-01 15:59:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqkmxtmlzmx2 2025-06-01 16:40:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqkpbam3sh2s 2025-06-03...

CVE-2025-5190

creationtimestamp| type| source ---|---|--- 2025-05-30 12:37:16+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfaq6yvv7c2 2025-05-30 13:02:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqfc4zkuiz2a...

CVE-2025-25025

creationtimestamp| type| source ---|---|--- 2025-05-28 02:00:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq746hd4r552 2025-05-28 03:41:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7bum4yql2m...

CVE-2025-5271

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17622 2025-05-27 13:16:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5rf525f7z2 2025-05-27 13:56:54+00:00| seen|...

CVE-2025-5148

creationtimestamp| type| source ---|---|--- 2025-05-25 12:13:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpyn2glud7c2 2025-05-25 13:36:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpyrp47ytr2w...

CVE-2025-5147

creationtimestamp| type| source ---|---|--- 2025-05-25 11:43:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpylf24ajrv2 2025-05-25 11:45:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17506 2025-05-25...

CVE-2025-5135

creationtimestamp| type| source ---|---|--- 2025-05-24 22:45:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17497 2025-05-24 23:11:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpxb7kdrdlo2 2025-05-25...

CVE-2025-4603

creationtimestamp| type| source ---|---|--- 2025-05-24 04:01:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpvb2eiandw2 2025-05-24 04:50:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17479 2025-05-24...

CVE-2024-52591

Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet and HttpRequestService.getActivityJson allows an attacker to create fake user profiles and forged notes. The spoofed users will appear to be from a different instance...

CVE-2024-31870

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in...