PT-2025-19921 · Tcman · Tcman'S Gim

Name of the Vulnerable Software and Affected Versions: TCMAN GIM version 11 Description: This issue allows an unauthenticated attacker to upload any file within the server, including malicious files, to obtain Remote Code Execution RCE. Recommendations: For TCMAN GIM version 11, consider disablin...

CVE-2025-45615

creationtimestamp| type| source ---|---|--- 2025-05-05 19:20:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14961 2025-05-06 00:15:29+00:00| seen| https://t.me/cvedetector/24515 2025-05-06 04:36:06+00:00| seen|...

GHSA-MF88-G2WQ-P7QM

creationtimestamp| type| source ---|---|--- 2025-05-05 17:20:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14937 2025-05-05 17:37:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114456436384488510 2025-05-19 16:39:06+00:00| seen|...

CVE-2025-4348

creationtimestamp| type| source ---|---|--- 2025-05-05 17:11:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114456336307073752 2025-05-06 11:21:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15085 2025-05-06 14:21:38+00:00| seen|...

CVE-2024-58098

creationtimestamp| type| source ---|---|--- 2025-05-05 16:16:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3logrd7ubfp2w 2025-05-09 08:25:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15705 2026-03-19 00:00:00+00:00| seen|...

GO-2025-3648 Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks in github.com/rancher/stev

Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle MitM attacks in github.com/rancher/stev. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

GO-2025-3646 CNCF K3s Kubernetes kubelet configuration exposes credentials in github.com/k3s-io/k3s

CNCF K3s Kubernetes kubelet configuration exposes credentials in github.com/k3s-io/k3s. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...

CVE-2025-4316

creationtimestamp| type| source ---|---|--- 2025-05-05 14:20:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14868 2025-05-05 14:30:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114455703183156737 2025-05-05 16:16:30+00:00| seen|...

CVE-2025-4271

creationtimestamp| type| source ---|---|--- 2025-05-05 10:21:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3log5hx4po32p 2025-05-05 11:41:44+00:00| seen| https://t.me/cvedetector/24446...

BELL-CVE-2023-53103

Bulletin has no description...

CVE-2025-4255

creationtimestamp| type| source ---|---|--- 2025-05-04 19:35:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114451238208745182 2025-05-05 00:19:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14817 2025-05-05 03:19:54+00:00| seen|...

CVE-2023-53133

creationtimestamp| type| source ---|---|--- 2025-05-02 20:06:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo7mr52jgp2t 2025-05-02 20:07:53+00:00| seen| https://t.me/cvedetector/24364 2025-12-03 14:14:49+00:00| seen|...

CVE-2025-44872

creationtimestamp| type| source ---|---|--- 2025-05-02 15:17:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14501 2025-05-02 15:59:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo73xkzqzvk2 2025-05-02...

CVE-2022-49927

In the Linux kernel, the following vulnerability has been resolved: nfs4: Fix kmemleak when allocate slot failed If one of the slot allocate failed, should cleanup all the other allocated slots, otherwise, the allocated slots will leak: unreferenced object 0xffff8881115aa100 size 64: comm...

CVE-2025-29825

creationtimestamp| type| source ---|---|--- 2025-05-02 04:47:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114436423868001029 2025-05-02 05:04:04+00:00| seen| https://t.me/cvedetector/24303 2025-05-08 03:12:38+00:00| seen|...

Wordfence Intelligence Weekly WordPress Vulnerability Report (April 21, 2025 to April 27, 2025)

In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. Last week, there were 232 vulnerabilities disclosed in 199 WordPress...

CVE-2025-32011

creationtimestamp| type| source ---|---|--- 2025-05-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01 2025-05-01 19:15:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14379 2025-05-01 20:36:00+00:00| seen|...

CVE-2025-2774

creationtimestamp| type| source ---|---|--- 2025-05-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-282/ 2025-05-04 02:00:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3locqzuaxkk2q 2025-05-04 04:40:43+00:00| seen| https://t.me/CyberBulletin/10744...

CVE-2025-46558

creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14127 2025-04-30 19:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114428642542388304 2025-04-30 20:30:48+00:00| seen|...

PT-2025-18912 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns an uninitialized memory access in the Linux kernel. However, Red Hat Product Security has concluded that this CVE is not needed, indicating a rejection of the vulnerabilit...