CVE-2025-4531 Seeyon Zhiyuan OA Web Application System Beetl Template EhrSalaryPayrollServiceImpl.class postData code injection

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as critical. Affected by this issue is the function postData of the file ROOT\WEB-INF\classes\com\ours\www\ehr\salary\service\data\EhrSalaryPayrollServiceImpl.class of the component Beetl Template...

CVE-2025-46824

creationtimestamp| type| source ---|---|--- 2025-05-07 21:31:41+00:00| seen| https://t.me/cvedetector/24742 2025-05-07 22:27:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomgxvldu62o...

CVE-2025-3851

creationtimestamp| type| source ---|---|--- 2025-05-07 02:21:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15247 2025-05-07 04:26:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokkl3pbb22p 2025-05-07 07:12:57+00:00| seen|...

CVE-2025-4313

creationtimestamp| type| source ---|---|--- 2025-05-06 05:20:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15058 2025-05-06 06:21:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajoyu642j 2025-05-06 08:00:49+00:00| published-proof-of-concept|...

CVE-2025-27921

creationtimestamp| type| source ---|---|--- 2025-05-05 20:03:54+00:00| seen| https://t.me/cvedetector/24474 2025-05-13 08:02:21+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3lozzh2lpaf2h 2025-05-13 14:46:13+00:00| seen| https://poliverso.org/objects/0477a01e-47e8df00-879faa5b2ea09852...

Important: Red Hat Security Advisory: yelp security update

An update for yelp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as havi...

BeyondTrust Privileged Remote Access 安全漏洞

BeyondTrust Privileged Remote Access BeyondTrust PRA is a privileged remote access software from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privileged Remote Access versions prior to 25.1 that stems from a local authentication bypass that could lead to unauthorized session...

GHSA-859W-5945-R5V3

creationtimestamp| type| source ---|---|--- 2025-05-02 18:19:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14557 2025-05-05 07:01:24+00:00| seen| https://bsky.app/profile/mynameisv.bsky.social/post/3lofscowf6k2y...

CVE-2025-1301

creationtimestamp| type| source ---|---|--- 2025-05-02 11:15:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14468 2025-05-02 12:00:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6rn5sanf24 2025-05-02 14:30:45+00:00| seen|...

CVE-2025-32886

creationtimestamp| type| source ---|---|--- 2025-05-01 18:15:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14357...

CVE-2022-49855

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipcpciereadbioscfg ipcpciereadbioscfg is using the acpievaluatedsm to obtain the wwan power state configuration from BIOS but is not freeing the acpiobject. The acpievaluatedsm returned...

CVE-2025-3874

creationtimestamp| type| source ---|---|--- 2025-05-01 12:14:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14262...

CVE-2025-24348

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the wireless network configuration file via a crafted HTTP request...

CVE-2025-24346

creationtimestamp| type| source ---|---|--- 2025-04-30 12:12:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14015 2025-04-30 14:31:11+00:00| seen| Telegram/xLNolCYDHMAF4bbxCk1zERkTbjpp23tQ8mkC2YWhD-XRbxs 2025-04-30 15:55:41+00:00| seen|...

CVE-2025-24345

CVE-2025-24345 affects ctrlX OS web application’s Hosts functionality. A remote authenticated (low-privileged) attacker can manipulate the hosts file via a crafted HTTP request, indicating improper input/authorization handling in the Hosts feature. CVSSv3.1 base score is 6.3 (MEDIUM) with network...

CVE-2025-46701

creationtimestamp| type| source ---|---|--- 2025-04-30 07:49:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/34783 2025-05-29 18:11:40+00:00| seen| https://seclists.org/oss-sec/2025/q2/184 2025-05-29 19:48:02+00:00| seen|...

CVE-2025-0520

creationtimestamp| type| source ---|---|--- 2025-04-29 20:12:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13918 2025-04-29 23:31:43+00:00| seen| https://t.me/cvedetector/24050 2025-04-29 23:50:45+00:00| seen|...

CVE-2025-4086

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn33n5k22s 2025-04-29 16:49:37+00:00| seen| https://t.me/cvedetector/23996...

CVE-2025-31197

creationtimestamp| type| source ---|---|--- 2025-04-29 03:50:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuffhil2d 2025-04-29 06:47:57+00:00| seen| https://t.me/cvedetector/23975...

CVE-2025-24251

creationtimestamp| type| source ---|---|--- 2025-04-29 03:50:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuej7ty2b 2025-04-29 06:47:51+00:00| seen| https://t.me/cvedetector/23971 2025-04-29 14:11:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13826...