CVE-2024-52588

Strapi is an open-source content management system. Prior to version 4.25.2, inputting a local domain into the Webhooks URL field leads to the application fetching itself, resulting in a server side request forgery SSRF. This issue has been patched in version 4.25.2...

CVE-2025-48486

creationtimestamp| type| source ---|---|--- 2025-05-30 06:49:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqen5nnerbe2...

CVE-2025-46570

creationtimestamp| type| source ---|---|--- 2025-05-29 18:07:54+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdcp3xzobo2...

CVE-2025-5054

creationtimestamp| type| source ---|---|--- 2025-05-29 15:19:54+00:00| seen| https://seclists.org/oss-sec/2025/q2/183 2025-05-29 17:47:17+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lqdblrdkqb2g 2025-05-29 17:57:31+00:00| seen|...

GHSA-2HJ5-G64G-FP6P

creationtimestamp| type| source ---|---|--- 2025-05-29 13:14:47+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lqcseht7mw2l 2026-01-24 21:30:37+00:00| seen| https://gist.github.com/alon710/da6cd5684b398c9cf5fbb614e2ac5c8a 2026-01-24 21:30:38+00:00| seen|...

CVE-2025-5277

creationtimestamp| type| source ---|---|--- 2025-05-28 13:56:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114585800636728854 2025-05-28 15:27:28+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaj63cav5t2...

CVE-2025-4947

creationtimestamp| type| source ---|---|--- 2025-05-28 03:48:12+00:00| seen| https://daniel.haxx.se/blog/2025/05/28/curl-8-14-0/ 2025-05-28 03:51:53+00:00| seen| https://seclists.org/oss-sec/2025/q2/173 2025-05-28 07:45:19+00:00| seen|...

CVE-2025-48926

The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses, passwords, and telephone numbers...

CVE-2025-48929

The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential e.g., not a token with a short expiration time that can be reused at a later date if discovered by an adversary...

CVE-2025-2826

creationtimestamp| type| source ---|---|--- 2025-05-27 23:26:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114582383243251984...

CVE-2025-48827

creationtimestamp| type| source ---|---|--- 2025-05-27 04:47:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17606 2025-05-27 05:35:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4xrqhgwpy2 2025-05-27...

CVE-2025-48054

creationtimestamp| type| source ---|---|--- 2025-05-27 04:47:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17604 2025-05-27 05:00:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4vsqoyz352 2025-05-27...

CVE-2025-48827

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern, as exploited in the wild in May 2025...

RHEL 8 : yelp and yelp-xsl (RHSA-2025:7569)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7569 advisory. Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including...

CVE-2025-5203

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function SkipSpaces in the library assimp/include/assimp/ParsingUtils.h. The manipulation leads to out-of-bounds read. Local access is required to approach this...

CVE-2025-40650

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17561 2025-05-26 14:08:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3dy3ntmz2a 2025-05-26 15:28:54+00:00| seen|...

CVE-2025-4053

creationtimestamp| type| source ---|---|--- 2025-05-26 10:47:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17547 2025-05-26 13:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3chkhrqy2m 2025-05-27 13:22:24+00:00| seen|...

CVE-2025-5180 Wondershare Filmora Installer NFWCHK.exe uncontrolled search path

A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16. Affected by this issue is some unknown functionality in the library CRYPTBASE.dll of the file NFWCHK.exe of the component Installer. The manipulation leads to uncontrolled search path. Attacking...

Fedora: Security Advisory (FEDORA-2025-e94782e579)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5149

creationtimestamp| type| source ---|---|--- 2025-05-25 13:46:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17507 2025-05-25 13:47:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpysc56jl7c2 2025-05-25...