CVE-2025-31564

creationtimestamp| type| source ---|---|--- 2025-04-01 22:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llrxugbno326 2025-04-01 23:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114265379449386478 2025-04-01 23:48:42+00:00| seen|...

CVE-2025-31561

creationtimestamp| type| source ---|---|--- 2025-04-01 22:57:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llrxuesacn23 2025-04-01 23:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114265379364017192 2025-04-01 23:48:42+00:00| seen|...

CVE-2025-31579

creationtimestamp| type| source ---|---|--- 2025-04-01 21:40:36+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llrtlkdgi52b 2025-04-01 22:57:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llrxuf24wx2s 2025-04-01 23:48:43+00:00| seen|...

CVE-2025-31531

creationtimestamp| type| source ---|---|--- 2025-04-01 21:40:28+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llrtldhqau2o 2025-04-01 23:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114265379083150582 2025-04-01 23:48:39+00:00| seen|...

CVE-2025-30444

creationtimestamp| type| source ---|---|--- 2025-04-01 19:58:07+00:00| seen| https://bsky.app/profile/supernetworks.bsky.social/post/3llrnubwmqk2b 2025-04-01 19:59:54+00:00| seen| https://bsky.app/profile/supernetworks.bsky.social/post/3llrnxiexxs2b 2025-04-01 20:00:24+00:00| seen|...

CVE-2025-31137

creationtimestamp| type| source ---|---|--- 2025-04-01 18:32:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9963 2025-04-01 19:36:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114264388612256212 2025-04-01 19:36:44+00:00| seen|...

CVE-2025-30210

Bruno is an open source IDE for exploring and testing APIs. Prior to 1.39.1, the custom tool-tip components which internally use react-tooltip were setting the content in this case the Environment name as raw HTML which then gets injected into DOM on hover. This, combined with loose Content...

CVE-2025-30354

Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to run in Developer Mode, even if Safe Mode was selected. The bug resulted in the sandbox settings to be ignored for the particular case where a single request is run/sent. This...

graphql-ruby: Remote code execution when loading a crafted GraphQL schema

A flaw was found in graphql-ruby. In affected versions of graphq-ruby, loading a malicious schema definition in the GraphQL::Schema.fromintrospection or the GraphQL::Schema::Loader.load can cause remote code execution. Any system that loads a schema by JSON from an untrusted source is vulnerable,...

CVE-2025-24181

creationtimestamp| type| source ---|---|--- 2025-04-01 14:33:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9907 2026-04-02 22:14:12+00:00| seen| Telegram/rgUMiA5BiDEUoxRBbKGjRmrNvY5v49pyhjoufWmWJx2GI...

CVE-2025-24247

creationtimestamp| type| source ---|---|--- 2025-04-01 14:33:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9905 2026-04-02 22:15:08+00:00| seen| Telegram/A1zSU9KcM20ZRLemoMFRz3NG5DsD-KNcnO6EGaNoIwAY1a4...

CVE-2025-30354 Bruno ignores Safe-Mode in Asserts expressions

Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to run in Developer Mode, even if Safe Mode was selected. The bug resulted in the sandbox settings to be ignored for the particular case where a single request is run/sent. This...

CVE-2025-30354 Bruno ignores Safe-Mode in Asserts expressions

Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to run in Developer Mode, even if Safe Mode was selected. The bug resulted in the sandbox settings to be ignored for the particular case where a single request is run/sent. This...

CVE-2025-30210 Bruno XSS On Environment Name

Bruno is an open source IDE for exploring and testing APIs. Prior to 1.39.1, the custom tool-tip components which internally use react-tooltip were setting the content in this case the Environment name as raw HTML which then gets injected into DOM on hover. This, combined with loose Content...

CVE-2025-30210 Bruno XSS On Environment Name

Bruno is an open source IDE for exploring and testing APIs. Prior to 1.39.1, the custom tool-tip components which internally use react-tooltip were setting the content in this case the Environment name as raw HTML which then gets injected into DOM on hover. This, combined with loose Content...

CVE-2025-22231

creationtimestamp| type| source ---|---|--- 2025-04-01 14:00:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114263066271453967 2025-04-01 14:00:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114263066271453967 2025-04-01 16:32:33+00:00| seen|...

CVE-2025-1660

creationtimestamp| type| source ---|---|--- 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-03 03:00:00+00:00| seen|...

CVE-2025-1659

creationtimestamp| type| source ---|---|--- 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-01 13:05:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262852107639572 2025-04-03 03:00:00+00:00| seen|...

CVE-2025-3030

creationtimestamp| type| source ---|---|--- 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839 2025-04-01 17:48:22+00:00| seen|...

CVE-2025-3028

creationtimestamp| type| source ---|---|--- 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839 2025-04-03 10:35:56+00:00| seen|...