CVE-2025-32779

creationtimestamp| type| source ---|---|--- 2025-04-15 17:04:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114343062669368490 2025-04-15 18:43:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmuqakqs7r2r 2025-04-15 21:37:58+00:00| seen| https://t.me/cvedetector/229...

CVE-2017-7598

creationtimestamp| type| source ---|---|--- 2025-04-15 15:50:46+00:00| seen| https://gist.github.com/MANA-Y/0152a79b9c2c6bf11db57c32b2676b0a...

CVE-2025-32945

creationtimestamp| type| source ---|---|--- 2025-04-15 14:15:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114342397806384726 2025-04-15 16:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmujasjh7k24 2025-04-15 17:26:34+00:00| seen| https://t.me/cvedetector/229...

CVE-2025-26954

creationtimestamp| type| source ---|---|--- 2025-04-15 12:38:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmu3tckoz22u 2025-04-15 12:54:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11795 2025-04-15 15:46:25+00:00| seen| https://t.me/cvedetector/22948...

Insights from the field:  Key Findings from the ICIT report on Government Cloud Security

Wiz partnered with the Institute for Critical Infrastructure Technology ICIT publishing a report around findings from a survey given to federal and state agencies, highlighting the growing importance of cloud and AI technologies, and concerns around available resources and data protections...

CVE-2025-27568

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04...

CVE-2025-27575

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04...

CVE-2025-27939

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04...

CVE-2025-27565

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04...

CVE-2025-27929

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04 2025-04-15 22:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5o2a6ux2i 2025-04-15 22:55:54+00:00| seen|...

platinumequity.com Cross Site Scripting vulnerability OBB-4046293

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-32934

creationtimestamp| type| source ---|---|--- 2025-04-15 04:38:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmtaybzal52j 2025-04-15 07:24:11+00:00| seen| https://t.me/cvedetector/22913...

OSV-2025-280 Heap-buffer-overflow in Assimp::SceneCombiner::CopyScene

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410393968 Crash type: Heap-buffer-overflow READ Crash state: Assimp::SceneCombiner::CopyScene Assimp::Exporter::Export Assimp::Exporter::ExportToBlob...

📄 Rollback Rx Professional 12.8.0.0 NULL Pointer Dereference

Rollback Rx Professional version 12.8.0.0 suffers from a null pointer dereference in shieldm.sys. Title: Rollback Rx Professional 12.8.0.0 - "shieldm.sys" Null Pointer Dereference Author: Can Burak Dönmez Date: 14.04.2025 Vendor: https://horizondatasys.com Affected Version: 12.8.0.0 Tested: Win10...

CVE-2025-3565

creationtimestamp| type| source ---|---|--- 2025-04-14 17:10:47+00:00| seen| https://t.me/cvedetector/22849...

CERTFR-2025-ACT-015

creationtimestamp| type| source ---|---|--- 2025-04-14 12:21:25+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lmrkfn4af42l 2025-04-14 12:21:26+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114336286913520676 2025-04-14 15:58:37+00:00| seen|...

CVE-2025-3564

A vulnerability classified as problematic has been found in huanfenz/code-projects StudentManager up to 1.0. This affects an unknown part of the component Teacher String Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-3558

creationtimestamp| type| source ---|---|--- 2025-04-14 08:55:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11587 2025-04-14 12:33:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl32wo5o2h 2025-04-14 12:59:21+00:00| seen|...

OSV-2025-275 UNKNOWN READ in void std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::__cons

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410115359 Crash type: UNKNOWN READ Crash state: void std::1::vector::cons Poco::Net::NTLMCredentials::parseChallengeMessage Poco::Net::HTTPNTLMCredentials::createNTLMMessage...

db-hospital-drug 代码注入漏洞

db-hospital-drug is a hospital inventory management system by James Personal Developer. A code injection vulnerability exists in db-hospital-drug version 1.0, which stems from improper manipulation of the parameter content in the file ContentController.java, and could lead to a cross-site scripti...