CVE-2025-5219

creationtimestamp| type| source ---|---|--- 2025-05-27 01:48:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17593 2025-05-27 03:36:31+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lq4r4bu76hz2 2025-05-27...

CVE-2025-5217

creationtimestamp| type| source ---|---|--- 2025-05-27 00:47:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17588 2025-05-27 03:36:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq4r45qmbw27 2025-05-27 03:36:32+00:00| seen|...

CVE-2025-5201

creationtimestamp| type| source ---|---|--- 2025-05-26 19:48:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17575 2025-05-26 19:53:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3x5y4r57g2 2025-05-26...

CVE-2025-23394

creationtimestamp| type| source ---|---|--- 2025-05-26 15:47:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17567 2025-05-26 17:23:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3ougjbbhm2 2025-05-26 17:46:51+00:00| seen|...

PT-2025-22906 · Google · Web Designer App +1

Name of the Vulnerable Software and Affected Versions: Google Web Designer versions prior to 16.3.0.0407 Description: The issue allows an attacker to achieve remote code execution by tricking users into downloading a malicious ad template. This is due to path traversal in Google Web Designer's...

CVE-2025-5149

creationtimestamp| type| source ---|---|--- 2025-05-25 13:46:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17507 2025-05-25 13:47:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpysc56jl7c2 2025-05-25...

CVE-2025-5140

creationtimestamp| type| source ---|---|--- 2025-05-25 02:09:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpxlapx4o422 2025-05-25 02:46:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17503 2025-05-25...

CVE-2025-5133

creationtimestamp| type| source ---|---|--- 2025-05-24 21:46:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17496 2025-05-24 22:11:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpx5zugzjto2 2025-05-25...

CVE-2025-5129

creationtimestamp| type| source ---|---|--- 2025-05-24 16:45:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17492 2025-05-24 16:52:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpwm53hixkj2 2025-05-24...

CVE-2025-5058

creationtimestamp| type| source ---|---|--- 2025-05-24 04:00:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpvazbswalb2 2025-05-24 06:55:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpvktqi4ol2w 2025-05-27...

CVE-2025-5119

creationtimestamp| type| source ---|---|--- 2025-05-23 21:45:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17475 2025-05-23 23:29:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpurw3j4mea2 2025-05-24...

CVE-2025-48064

GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...

CVE-2024-25129

The CodeQL CLI repo holds binaries for the CodeQL command line interface CLI. Prior to version 2.16.3, an XML parser used by the CodeQL CLI to read various auxiliary files is vulnerable to an XML External Entity attack. If a vulnerable version of the CLI is used to process either a maliciously...

CVE-2024-6322

Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user or service account is granted associated access to any other data source, as the ReqActions check was not scoped to each specific datasource. The account must have prior query...

CVE-2023-37476

OpenRefine is a free, open source tool for data processing. A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code execution in the context of the OpenRefine process if a user can be convinced to import it. The vulnerability exists in all versions of...

CVE-2023-31471

An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to install...

CVE-2023-26268

Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environment when using these design document functions: validatedocupdate list filter filter views using view functions as filters rewrite update This doesn't affect map/reduce or searc...

CVE-2023-30996

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290...

CVE-2023-24529

Due to lack of proper input validation, BSP application CRMBSPFRAME - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H, allow malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a Reflected Cross-Site Scripting XSS attack. As a...

CVE-2023-25262

Stimulsoft GmbH Stimulsoft Designer Web 2023.1.3 is vulnerable to Server Side Request Forgery SSRF. TThe Reporting Designer Web offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that resource is performed by the server rather...