PT-2025-08: Deserialization of untrusted data in TCPDF

This library has a class containing a POP Property Oriented Programming chain. When deserializing this class with certain values ​​of some fields, an attacker can delete an arbitrary file from the system. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 20.04.2025...

GHSA-M5PX-PWQ3-4P5M

creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12471 2025-04-18 16:28:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114359909527505857...

CVE-2025-39688

In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SCSTATUSFREEABLE when searching via nfs4lookupstateid The pynfs DELEG8 test fails when run against nfsd. It acquires a delegation and then lets the lease time out. It then tries to use the deleg stateid and expects to...

DEBIAN-CVE-2025-39688

In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SCSTATUSFREEABLE when searching via nfs4lookupstateid The pynfs DELEG8 test fails when run against nfsd. It acquires a delegation and then lets the lease time out. It then tries to use the deleg stateid and expects to...

UBUNTU-CVE-2025-39688

In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SCSTATUSFREEABLE when searching via nfs4lookupstateid The pynfs DELEG8 test fails when run against nfsd. It acquires a delegation and then lets the lease time out. It then tries to use the deleg stateid and expects to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unallowed SCSTATUSFREEABLE state, which could result in an incorrect state ID...

PT-2025-17277 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the nfsd module. The issue arises when a delegation is revoked and marked with the SC STATUS FREEABLE flag, which...

CVE-2025-3762

creationtimestamp| type| source ---|---|--- 2025-04-17 23:01:02+00:00| seen| https://t.me/cvedetector/23265 2025-04-18 20:59:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12541...

CVE-2025-26269

creationtimestamp| type| source ---|---|--- 2025-04-17 18:54:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqzhnnw2v 2025-04-17 23:01:03+00:00| seen| https://t.me/cvedetector/23267 2025-04-22 08:40:16+00:00| seen|...

CVE-2021-47668

creationtimestamp| type| source ---|---|--- 2025-04-17 18:54:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqyhl5e2d 2025-04-17 23:01:18+00:00| seen| https://t.me/cvedetector/23278...

GHSA-X8PM-WRG2-MQMX OpenMetadata SQL Injection

OpenMetadata =1.4.1 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the WorkflowDAO interface. The workflowtype and status parameters can be used to build a SQL query...

CVE-2025-32660

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:45+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325083970600 2025-04-17 18:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3c2ntd2b...

CVE-2025-32636

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354324910862733...

CVE-2022-46288

creationtimestamp| type| source ---|---|--- 2025-04-17 14:58:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12239...

CVE-2025-1532

creationtimestamp| type| source ---|---|--- 2025-04-17 09:59:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12202 2025-04-17 10:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114352908967822671 2025-04-17 10:48:54+00:00| seen|...

Account Enumeration

shopware/core is vulnerable to Account Enumeration. The vulnerability is due to differing API responses that reveal whether an email address is associated with an account, allowing attackers to infer user registration status...

CVE-2025-43717

creationtimestamp| type| source ---|---|--- 2025-04-17 03:59:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12180 2025-04-17 06:17:25+00:00| seen| https://t.me/cvedetector/23212 2025-04-17 06:48:42+00:00| seen|...

CVE-2024-55371

creationtimestamp| type| source ---|---|--- 2025-04-17 00:25:55+00:00| seen| https://t.me/cvedetector/23179 2025-04-17 14:49:03+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114353854322463749...

PT-2025-22162

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the iommu copy struct from user function. The issue involved a NULL pointer that should be rejected prior to...

CVE-2025-29709

creationtimestamp| type| source ---|---|--- 2025-04-16 22:43:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo3krp7a2c 2025-04-17 00:25:48+00:00| seen| https://t.me/cvedetector/23173 2025-04-17 13:57:50+00:00| published-proof-of-concept|...