UBUNTU-CVE-2025-21626

GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive information from the status.php endpoint. Version 10.0.18 contains a fix for the issue. Some workarounds are available. One may delete the status.p...

CVE-2025-21626 GLPI vulnerable to exposure of sensitive information in the `status.php` endpoint

GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive information from the status.php endpoint. Version 10.0.18 contains a fix for the issue. Some workarounds are available. One may delete the status.p...

urllib3: Request body not stripped after redirect from 303 status changes request method to GET

A flaw was found in urllib3, an HTTP client library for Python. urllib3 doesn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303, after changing the method in a request from one that could accept a request body such as POST to GET, as is required by HTTP...

Exploit for CVE-2025-23942

WP Load Gallery Exploit CVE-2025-23942 📌 Description Unr...

openSUSE Security Advisory (SUSE-SU-2024:0138-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLPI 信息泄露漏洞

GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

CVE-2024-53544

creationtimestamp| type| source ---|---|--- 2025-02-24 23:27:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5233 2025-02-25 02:19:32+00:00| seen| https://t.me/cvedetector/18844 2025-02-25 02:57:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lixujrlndi22 2025-02-25...

CVE-2023-21045

creationtimestamp| type| source ---|---|--- 2025-02-24 20:22:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5220...

CVE-2024-12917

creationtimestamp| type| source ---|---|--- 2025-02-24 17:21:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5186 2025-02-24 17:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114060119701091927 2025-02-24 19:32:25+00:00| seen|...

Advisory ROSA-SA-2025-2703

Software: jbig2dec 0.16 OS: ROSA Virtualization 3.0 packageevrstring: jbig2dec-0.16 CVE-ID: CVE-2020-12268 BDU-ID: 2022-05687 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the jbig2imagecompose function of the jbig2imagecompose component of the jbig2image.c decoder of the JBIG2 Jbig2dec image...

Advisory ROSA-SA-2025-2699

Software: perl-HTTP-Tiny 0.074 OS: ROSA Virtualization 3.0 packageevrstring: perl-HTTP-Tiny-0.074-2 CVE-ID: CVE-2023-31486 BDU-ID: 2023-03872 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Perl HTTP::Tiny programming language library is related to errors in the TLS certificate authentication...

Advisory ROSA-SA-2025-2698

Software: perl-CPAN 2.18 OS: ROSA Virtualization 3.0 packageevrstring: perl-CPAN-2.18-397.0.1 CVE-ID: CVE-2023-31484 BDU-ID: 2023-03871 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the CPAN.pm component of the Perl programming language is related to errors in the TLS certificate authentication...

CVE-2025-1615

creationtimestamp| type| source ---|---|--- 2025-02-24 04:21:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5125 2025-02-24 06:15:10+00:00| seen| https://t.me/cvedetector/18776 2025-02-24 06:32:29+00:00| seen|...

CLSA-2025-1740230407 libvirt: Fix of 2 CVEs

CVE-2024-1441: fix off-by-one error in udevListInterfacesByStatus - CVE-2024-2494: check for negative array lengths before allocation in remotedaemondispatch...

CVE-2024-13899

creationtimestamp| type| source ---|---|--- 2025-02-22 04:18:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5003 2025-02-22 06:38:31+00:00| seen| https://t.me/cvedetector/18704...

PT-2025-13228

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was found in the ipvlan module, where the function ipvlan process v6 outbound was assuming the IPv6 network header is...

CVE-2025-27106

creationtimestamp| type| source ---|---|--- 2025-02-21 22:18:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114044196487307845 2025-02-21 23:31:55+00:00| published-proof-of-concept| Telegram/z-TEGJuLb-MI9QSBe5sQLLsDPvx9hpDxWNGhFcSyGduHviQ 2025-02-21 23:57:28+00:00| seen|...

CVE-2025-25768

creationtimestamp| type| source ---|---|--- 2025-02-21 22:17:14+00:00| seen| https://t.me/cvedetector/18687 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...

CVE-2025-25875

creationtimestamp| type| source ---|---|--- 2025-02-21 18:19:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4953 2025-02-21 19:46:40+00:00| seen| https://t.me/cvedetector/18668 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...

CVE-2025-1537

creationtimestamp| type| source ---|---|--- 2025-02-21 15:23:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4905 2025-02-21 18:06:09+00:00| seen| https://t.me/cvedetector/18658 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...