CVE-2020-36845

creationtimestamp| type| source ---|---|--- 2025-04-20 22:05:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12621 2025-04-20 22:49:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnbqbju5rz2t 2025-04-21 02:15:51+00:00| seen| https://t.me/cvedetector/23419 2025-08-09...

CVE-2025-3825

creationtimestamp| type| source ---|---|--- 2025-04-20 11:58:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnalvb6v6la2 2025-04-20 12:01:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12612 2025-04-20...

CVE-2023-26819

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as "a": true, "b": null,9999999999999999999999999999999999999999999999912345678901234567...

CVE-2025-3804

creationtimestamp| type| source ---|---|--- 2025-04-19 16:02:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12585 2025-04-19 16:43:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln6lf2ixbb2r 2025-04-19 19:19:35+00:00| seen|...

CVE-2022-20533

creationtimestamp| type| source ---|---|--- 2025-04-18 15:59:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12476...

CVE-2025-30357

creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12466 2025-04-18 16:34:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln42frbshg2b 2025-04-18 17:27:36+00:00| seen|...

CVE-2025-37893

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix off-by-one error in buildprologue Vincent reported that running BPF progs with tailcalls on LoongArch causes kernel hard lockup. Debugging the issues shows that the JITed image missing a jirl instruction at th...

CVE-2025-40114

In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075readinttimems The array contains only 5 elements, but the index calculated by veml6075readinttimeindex can range from 0 to 7, which could lead to out-of-bounds access. The check...

CVE-2025-29451

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12372 2025-04-17 22:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pajc52y 2025-04-18 00:41:40+00:00| seen|...

CVE-2025-29456

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12364 2025-04-17 22:53:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274prrq72d 2025-04-18 03:12:07+00:00| seen|...

CVE-2025-39542

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:51+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325420006907 2025-04-17 18:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3brewt2j...

CVE-2025-30706

creationtimestamp| type| source ---|---|--- 2025-04-17 04:57:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12185...

CVE-2025-43715

creationtimestamp| type| source ---|---|--- 2025-04-17 02:58:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12178 2025-04-17 04:48:38+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114351493478323215 2025-04-17 05:00:54+00:00| seen|...

USN-7441-1 mosquitto vulnerabilities

It was discovered that Eclipse Mosquitto client incorrectly handled memory when receiving a SUBACK packet. An attacker with a malicious broker could possibly use this issue to execute arbitrary code or cause a denial of service. CVE-2024-10525 Xiangpu Song discovered that Eclipse Mosquitto broker...

CVE-2025-2291

Password can be used past expiry in PgBouncer due to authquery not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password...

CVE-2025-32833

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockProjectUserRights' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...

openjdk: Improve compiler transformations (Oracle CPU 2025-04)

Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java...

CVE-2025-22111

In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. SIOCBRDELIF is passed to devioctl first and later forwarded to brioctlcall, which causes unnecessary RTNL dance and the splat below 0 under RTNL pressure. Let's say Thread A...

CVE-2025-22074

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix rcount dec/increment mismatch rcount is only increased when there is an oplock break wait, so rcount inc/decrement are not paired. This can cause rcount to become negative, which can lead to a problem where the ksmbd...

CVE-2025-23130

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic once fallocation fails for pinfile syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2746! CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted...