12868 matches found
CVE-2025-23983
creationtimestamp| type| source ---|---|--- 2025-05-19 16:39:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16874 2025-05-19 17:13:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zc4p6s2p...
CVE-2025-48243
CVE-2025-48243: WordPress reCAPTCHA for all plugin suffers a CSRF vulnerability in versions up to 2.26. Exploitation details are not provided in the Initial document, but Patchstack and NVD entries confirm a CSRF weakness affecting the plugin. The CVSS v3.1 base score is 4.3 (Medium) with no conf...
CVE-2025-4712
creationtimestamp| type| source ---|---|--- 2025-05-19 14:38:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16848...
CVE-2025-4906
creationtimestamp| type| source ---|---|--- 2025-05-19 02:38:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16788 2025-05-19 05:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissiqwkl2p...
DEBIAN-CVE-2025-23167
A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using \r\n\rX instead of the required \r\n\r\n. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by...
AZL-65063 CVE-2025-23167 affecting package nodejs18 18.20.3-11
A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using \r\n\rX instead of the required \r\n\r\n. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by...
AZL-61914 CVE-2025-23167 affecting package nodejs 20.14.0-13
A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using \r\n\rX instead of the required \r\n\r\n. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by...
Node.js 安全漏洞
Node.js is an open source, cross-platform JavaScript runtime environment from the Node.js open source. A security vulnerability exists in Node.js versions v20 and v22, which stems from a memory leak in the ReadFileUtf8 internal bindings that could lead to a denial of service...
CVE-2025-37890
In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report 1, we have a UAF case when an hfsc class has a netem child qdisc. The crux of the issue is that hfsc is assuming that...
CVE-2025-4610
creationtimestamp| type| source ---|---|--- 2025-05-17 17:01:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpezabvragj2 2025-05-19 20:39:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16928...
CVE-2025-4824
creationtimestamp| type| source ---|---|--- 2025-05-17 10:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpeecly6ud2h...
CVE-2025-4825 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDMZ buffer overflow
A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...
CVE-2025-2247
creationtimestamp| type| source ---|---|--- 2025-05-16 20:34:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16752 2025-10-16 21:02:44+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrmh6vg2a...
CVE-2024-9711
creationtimestamp| type| source ---|---|--- 2025-05-16 20:34:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16747...
CVE-2025-4430
Unauthorized access to "/api/Token/gettoken" endpoint in EZD RP allows file manipulation.This issue affects EZD RP in versions before 20.19 published on 22nd August 2024...
CVE-2024-50048
creationtimestamp| type| source ---|---|--- 2025-05-16 07:33:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16646 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
SUSE CVE-2025-23165
In Node.js, the ReadFileUtf8 internal binding leaks memory due to a corrupted pointer in uvfss.file: a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set. This results in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory...
GHSA-2F4R-34M4-3W8Q
creationtimestamp| type| source ---|---|--- 2025-05-15 21:33:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16574 2025-05-15 21:55:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114514077067044674...
CVE-2024-6690 WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect
The wccp-pro WordPress plugin before 15.3 contains an open-redirect flaw via the referrer parameter, allowing redirection of users to external sites...