CVE-2025-4015

creationtimestamp| type| source ---|---|--- 2025-04-28 10:10:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13665 2025-04-28 13:13:30+00:00| seen| https://t.me/cvedetector/23894 2025-04-28 13:40:12+00:00| seen|...

CVE-2025-3965

creationtimestamp| type| source ---|---|--- 2025-04-27 10:10:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13613 2025-04-27 11:24:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lns563lrxvp2 2025-04-27...

CVE-2025-3962

creationtimestamp| type| source ---|---|--- 2025-04-27 07:09:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13606 2025-04-27 07:35:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnrqil2sr62d 2025-04-27 10:28:06+00:00| seen|...

CVE-2025-3955

creationtimestamp| type| source ---|---|--- 2025-04-27 01:08:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13589 2025-04-27 03:35:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd2zfoox2s 2025-04-27 04:37:18+00:00| seen|...

CVE-2025-3954

creationtimestamp| type| source ---|---|--- 2025-04-26 22:10:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13588 2025-04-26 23:35:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnqvnigal32l 2025-04-27 00:30:41+00:00| seen|...

CVE-2024-53636

creationtimestamp| type| source ---|---|--- 2025-04-26 15:08:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13578 2025-04-26 15:34:13+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnq2r6mzenm2 2025-04-26...

Pete Hegseth’s Signal Scandal Spirals Out of Control

Plus: Cybercriminals stole a record-breaking fortune from US residents and businesses in 2024, and Google performs its final flip-flop in its yearslong quest to kill tracking cookies...

BIT-GITLAB-2025-1908 Business Logic Errors in GitLab

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-3935

creationtimestamp| type| source ---|---|--- 2025-04-25 18:46:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114400087294337009 2025-04-25 19:07:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13499 2025-04-25 21:30:14+00:00| seen|...

CVE-2025-27293

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webparexapp Shipmozo Courier Tracking webparex allows Reflected XSS.This issue affects Shipmozo Courier Tracking: from n/a through = 1.0...

CVE-2025-46275

creationtimestamp| type| source ---|---|--- 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06 2025-04-24 23:09:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13362 2025-04-25 00:19:53+00:00| seen|...

CVE-2025-1908

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

UBUNTU-CVE-2025-1908

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-1908 Business Logic Errors in GitLab

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-1908 Business Logic Errors in GitLab

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-1908

GitLab CVE-2025-1908 affects GitLab EE/CE. The issue could allow an attacker to track users’ browsing activities, potentially enabling full account takeover. Affected versions are 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. Root-cause details and remediation/fix informatio...

CVE-2025-1908 Business Logic Errors in GitLab

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

GitLab 16.6 < 17.9.7 / 17.10 < 17.10.5 / 17.11 < 17.11.1 (CVE-2025-1908)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before...

Shopify faces privacy lawsuit for collecting customer data

Shopify faces a data privacy class action lawsuit in the US that could change the way globally active companies can be held accountable. The proposed class action is a revival of a case that had been dismissed by a lower court judge and a three-judge 9th Circuit Court of Appeals panel. But now it...

Android Spyware Disguised as Alpine Quest App Targets Russian Military Devices

Cybersecurity researchers have revealed that Russian military personnel are the target of a new malicious campaign that distributes Android spyware under the guise of the Alpine Quest mapping software. "The attackers hide this trojan inside modified Alpine Quest mapping software and distribute it...