CVE-2022-20485

creationtimestamp| type| source ---|---|--- 2025-04-22 20:05:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12967...

CVE-2022-3921

creationtimestamp| type| source ---|---|--- 2025-04-22 15:03:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12873...

CVE-2022-42830

creationtimestamp| type| source ---|---|--- 2025-04-21 18:02:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12718...

CVE-2022-46393

creationtimestamp| type| source ---|---|--- 2025-04-21 15:03:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12680...

CVE-2022-42854

creationtimestamp| type| source ---|---|--- 2025-04-21 15:02:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12665...

CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2022-20533

creationtimestamp| type| source ---|---|--- 2025-04-18 15:59:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12476...

CVE-2025-30357

creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12466 2025-04-18 16:34:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln42frbshg2b 2025-04-18 17:27:36+00:00| seen|...

CVE-2025-32833

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockProjectUserRights' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...

WordPress Rescue Shortcodes plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Rescue Shortcodes versions = 3.1...

CVE-2025-39585

creationtimestamp| type| source ---|---|--- 2025-04-16 12:57:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12035 2025-04-16 14:44:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwtcckwej2z 2025-04-16 16:02:56+00:00| seen| https://t.me/cvedetector/23098...

CVE-2025-32021 Weblate VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintext

Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing component that has a source code repository URL specified in settings, this URL is included in the client's URL parameters during the creation process. If, for example, the source code...

CVE-2025-31357

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04...

CVE-2025-3569

Affected software: JamesZBL/code-projects db-hospital-drug 1.0. The vulnerability resides in ShiroConfig.java and involves improper authorization. Exploitation is described as possible remotely; the exploit has been publicly disclosed. Documented impact is limited to authorization control, with n...

Medium: ruby3.2

Issue Overview: In the URI gem before 1.0.3 for Ruby, the URI handling methods URI.join, URImerge, URI+ have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host. CVE-2025-27221 Affected Packages: ruby3.2 Issue Correction: Run dnf update...

CVE-2025-3542

creationtimestamp| type| source ---|---|--- 2025-04-13 23:52:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11570 2025-04-14 02:17:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmqioi4o4m2b 2025-04-14 02:30:17+00:00| published-proof-of-concept|...

CVE-2022-46582

creationtimestamp| type| source ---|---|--- 2025-04-11 22:51:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11498...

CVE-2025-21597

An Improper Check for Unusual or Exceptional Conditions vulnerability in routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, logically adjacent BGP peer to cause Denial of Service DoS. On all Junos OS and Junos OS Evolved platforms, when BGP...

CVE-2025-0121

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it...

CVE-2025-0126 PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login

When configured using SAML, a session fixation vulnerability in the GlobalProtect™ login enables an attacker to impersonate a legitimate authorized user and perform actions as that GlobalProtect user. This requires the legitimate user to first click on a malicious link provided by the attacker. T...