lunary access control error vulnerability (CNVD-2025-07600)

lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in lunary that stems from improper access control on the /prompts/promptid endpoint, and no detailed vulnerability details are provided at this time...

CVE-2025-2628

creationtimestamp| type| source ---|---|--- 2025-03-23 01:25:30+00:00| seen| https://t.me/cvedetector/20885 2025-03-23 01:49:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkz4tpwjdg2w...

CVE-2024-9880

creationtimestamp| type| source ---|---|--- 2025-03-20 12:48:45+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194836353277686 2025-03-26 17:25:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8900...

CVE-2025-29924

creationtimestamp| type| source ---|---|--- 2025-03-19 19:06:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114190659236671973 2025-03-19 20:00:51+00:00| published-proof-of-concept| Telegram/pKc-k4S4UpucBi-A8jZui2WxqHw-KLQAnPldAvhIPnjHqVQ 2025-03-19 20:18:15+00:00|...

Live Ransomware Demo: See How Hackers Breach Networks and Demand a Ransom

Cyber threats evolve daily. In this live webinar, learn exactly how ransomware attacks unfold—from the initial breach to the moment hackers demand payment. Join Joseph Carson, Delinea's Chief Security Scientist and Advisory CISO, who brings 25 years of enterprise security expertise. Through a liv...

Explaining External Network Assessment with Vector Command

Learn how external network assessment works within Vector Command, Rapid7’s continuous red team managed service. Understanding threat exposure management Let’s start by providing some context around where Vector Command fits into a security program and more specifically Continuous Threat Exposure...

CVE-2025-2023

creationtimestamp| type| source ---|---|--- 2025-03-10 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-122/...

CVE-2025-21838

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal devicedel can lead to new work being scheduled in gadget-work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: devicedel...

CVE-2025-2061 code-projects Online Ticket Reservation System passenger.php cross site scripting

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-27655

creationtimestamp| type| source ---|---|--- 2025-03-06 00:00:21+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbajj52b 2025-03-06 02:16:26+00:00| seen| Telegram/1Np4XDUTqbMrImIcHm8RIgunvF0kDg4Xu2I85ZHdh8fyW9e 2025-03-06 12:00:15+00:00| seen|...

CVE-2025-27682

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6489 2025-03-05 08:34:37+00:00| seen| https://t.me/cvedetector/19588 2025-03-06 12:00:29+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgztbv7d2e 2025-04-15...

Linux Distros Unpatched Vulnerability : CVE-2016-10061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attacker...

CVE-2025-26136

creationtimestamp| type| source ---|---|--- 2025-03-01 04:22:11+00:00| seen| https://gist.github.com/xiadmin6/6d664692d31a04eb59096a488b9f3712 2025-03-04 23:54:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljlnylxgxg2f 2025-03-05 00:12:48+00:00| seen|...

BELL-CVE-2024-58005

Bulletin has no description...

CVE-2025-25728

creationtimestamp| type| source ---|---|--- 2025-02-27 23:25:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5813 2025-02-28 01:53:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccupfih2p 2025-02-28 03:38:49+00:00| seen| https://t.me/cvedetector/19...

CVE-2024-54170

creationtimestamp| type| source ---|---|--- 2025-02-27 15:29:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5683 2025-02-27 16:12:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114076729153415963 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-25760

creationtimestamp| type| source ---|---|--- 2025-02-27 14:27:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5678 2025-02-27 17:53:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6hjgeobr2y 2025-02-27 19:15:59+00:00| seen|...

CVE-2024-57983

creationtimestamp| type| source ---|---|--- 2025-02-27 07:51:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114074757918670446...

CVE-2022-49397

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix struct clk leak on probe errors Make sure to release the pipe clock reference in case of a late probe error e.g. probe deferral...

CVE-2022-49198

In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix crash due to tcptsortedanchor was initialized before release skb Got crash when doing pressure test of mptcp: =========================================================================== dstrelease: dst:ffffa06ce6e5c058...