CVE-2025-30354

Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to run in Developer Mode, even if Safe Mode was selected. The bug resulted in the sandbox settings to be ignored for the particular case where a single request is run/sent. This...

CVE-2025-30210

Bruno is an open source IDE for exploring and testing APIs. Prior to 1.39.1, the custom tool-tip components which internally use react-tooltip were setting the content in this case the Environment name as raw HTML which then gets injected into DOM on hover. This, combined with loose Content...

graphql-ruby: Remote code execution when loading a crafted GraphQL schema

A flaw was found in graphql-ruby. In affected versions of graphq-ruby, loading a malicious schema definition in the GraphQL::Schema.fromintrospection or the GraphQL::Schema::Loader.load can cause remote code execution. Any system that loads a schema by JSON from an untrusted source is vulnerable,...

CVE-2025-24181

creationtimestamp| type| source ---|---|--- 2025-04-01 14:33:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9907 2026-04-02 22:14:12+00:00| seen| Telegram/rgUMiA5BiDEUoxRBbKGjRmrNvY5v49pyhjoufWmWJx2GI...

CVE-2025-24247

creationtimestamp| type| source ---|---|--- 2025-04-01 14:33:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9905 2026-04-02 22:15:08+00:00| seen| Telegram/A1zSU9KcM20ZRLemoMFRz3NG5DsD-KNcnO6EGaNoIwAY1a4...

CVE-2025-30354 Bruno ignores Safe-Mode in Asserts expressions

Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to run in Developer Mode, even if Safe Mode was selected. The bug resulted in the sandbox settings to be ignored for the particular case where a single request is run/sent. This...

CVE-2025-30354 Bruno ignores Safe-Mode in Asserts expressions

Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to run in Developer Mode, even if Safe Mode was selected. The bug resulted in the sandbox settings to be ignored for the particular case where a single request is run/sent. This...

CVE-2025-30210 Bruno XSS On Environment Name

Bruno is an open source IDE for exploring and testing APIs. Prior to 1.39.1, the custom tool-tip components which internally use react-tooltip were setting the content in this case the Environment name as raw HTML which then gets injected into DOM on hover. This, combined with loose Content...

CVE-2025-30210 Bruno XSS On Environment Name

Bruno is an open source IDE for exploring and testing APIs. Prior to 1.39.1, the custom tool-tip components which internally use react-tooltip were setting the content in this case the Environment name as raw HTML which then gets injected into DOM on hover. This, combined with loose Content...

CVE-2025-22231

creationtimestamp| type| source ---|---|--- 2025-04-01 14:00:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114263066271453967 2025-04-01 14:00:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114263066271453967 2025-04-01 16:32:33+00:00| seen|...

CVE-2025-1659

creationtimestamp| type| source ---|---|--- 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-03 03:00:00+00:00| seen|...

CVE-2025-1660

creationtimestamp| type| source ---|---|--- 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-03 03:00:00+00:00| seen|...

CVE-2025-3030

creationtimestamp| type| source ---|---|--- 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839 2025-04-01 17:48:22+00:00| seen|...

CVE-2025-3028

creationtimestamp| type| source ---|---|--- 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839 2025-04-03 10:35:56+00:00| seen|...

CVE-2025-29868

creationtimestamp| type| source ---|---|--- 2025-04-01 04:56:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llq3i46cmg2m 2025-04-01 08:32:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9866 2025-04-01 11:57:26+00:00| seen| https://t.me/cvedetector/21739 2025-04-02...

CVE-2025-21384

creationtimestamp| type| source ---|---|--- 2025-04-01 03:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114260660351537233 2025-04-01 03:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114260660351537233 2025-04-01 04:32:08+00:00| seen|...

CVE-2025-31188

creationtimestamp| type| source ---|---|--- 2025-04-01 03:35:22+00:00| seen| https://t.me/cvedetector/21689 2026-04-02 22:16:05+00:00| seen| Telegram/-SiHi-7t2ljbsWh0Emiw8XzTIBgcOzztbYY7biu1twV718 2026-04-02 22:16:17+00:00| seen| Telegram/cecIoS46aMlzFx0bKF1CERIzuoGO9AycvCYCjeLmGZFHs0...

CVE-2025-31191

creationtimestamp| type| source ---|---|--- 2025-04-01 03:35:14+00:00| seen| https://t.me/cvedetector/21683 2025-05-01 18:50:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lo4y37twut2t 2025-05-01 19:11:39+00:00| seen|...

CVE-2025-30065

creationtimestamp| type| source ---|---|--- 2025-04-01 02:51:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llpuigur7q2k 2025-04-01 08:32:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9867 2025-04-01 08:40:24+00:00| seen|...

CVE-2016-1238

creationtimestamp| type| source ---|---|--- 2025-04-01 02:32:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9816 2025-04-01 02:32:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9817 2025-04-01 02:32:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9818 2025-04-01 05:15:40+00:00...