CVE-2025-2261

CVE-2025-2261 is a Stored XSS in TIBCO ActiveMatrix Administrator affecting TIBCO BPM Enterprise. The vulnerability arises when user input is stored in a data store and later rendered without proper filtering, allowing malicious data to appear as part of the website and run in a user’s browser wi...

CVE-2025-44896

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bindEditMACName parameter in the webaclbindEditpost function...

CVE-2025-44886

Affected product: Planet FW-WGS-804HPT, version 1.305b241111. Vulnerability: stack overflow in the function web_acl_mgmt_Rules_Edit_postcontains, triggered by the byruleEditName parameter due to improper input validation. Impact (as described): potential arbitrary code execution or denial of serv...

Alibaba Cloud Linux 3 : 0060: mod_auth_openidc:2.3 (ALINUX3-SA-2025:0060)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0060 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-3891: A flaw was found in the modauthopeni...

CVE-2025-4825

creationtimestamp| type| source ---|---|--- 2025-05-17 10:43:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpeecllqnb2n...

CVE-2025-47279

Undici is an HTTP/1.1 client for Node.js. Prior to versions 5.29.0, 6.21.2, and 7.5.0, applications that use undici to implement a webhook-like system are vulnerable. If the attacker set up a server with an invalid certificate, and they can force the application to call the webhook repeatedly, th...

CVE-2025-30329

Animate versions 24.0.8, 23.0.11 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption of service. Exploitation of this issue requires user...

CVE-2025-48024

In BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive application secrets via the /api/v1/settings endpoint...

CVE-2025-24026

CVE-2025-24026 concerns iTop, a web-based ITSM tool. Versions prior to 3.2.1 are vulnerable to a regular expression denial of service (ReDoS) that may affect the iTop server under certain circumstances; the issue stems from using an affected variable in a regex. Version 3.2.1 does not use the vul...

GNU PSPP Denial of Service Vulnerability

GNU PSPP is an application for data sampling, statistics and analysis. A denial of service vulnerability exists in GNU PSPP, which can be exploited by an attacker to cause assertion failures and application exits...

Samsung libsavscmn Memory Corruption Vulnerability

Samsung libsavscmn is a cell phone application from the South Korean company Samsung SAMSUNG. A memory corruption vulnerability exists in Samsung libsavscmn, which can be exploited by attackers to cause memory corruption...

CVE-2024-51445

CVE-2024-51445 affects Siemens Polarion: Polarion V2310 (All versions) and Polarion V2404 (All versions

CVE-2025-4529

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file...

CVE-2023-49641

creationtimestamp| type| source ---|---|--- 2025-05-13 00:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lozb4rspe42p 2025-05-13 02:59:49+00:00| seen| https://t.me/cvedetector/25137 2025-05-13 14:30:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16131...

CVE-2025-4529

CVE-2025-4529 affects Seeyon Zhiyuan OA Web Application System 8.1 SP2. The vulnerability lies in the Download function of the ZIP File Handler within seeyon-apps-m3.jar (M3CoreController.class): manipulating the Name argument enables path traversal. Remote exploitation is possible and the exploi...

CVE-2025-28202

creationtimestamp| type| source ---|---|--- 2025-05-09 18:32:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rsi53z2o 2025-05-09 20:23:32+00:00| seen| https://t.me/cvedetector/24965...

CVE-2024-58098

creationtimestamp| type| source ---|---|--- 2025-05-05 16:16:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3logrd7ubfp2w 2025-05-09 08:25:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15705 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-27921

A reflected cross-site scripting XSS vulnerability was discovered in Output Messenger before 2.0.63, where unsanitized input could be injected into the web application’s response. This vulnerability occurs when user-controlled input is reflected back into the browser without proper sanitization o...

CVE-2025-27921

CVE-2025-27921 is a reflected XSS in Output Messenger prior to version 2.0.63 where user input is reflected in the web app response. Affected product: Output Messenger (client/web component). Mitigations reported: upgrade to version 2.0.63 or later; no exploitation of this CVE has been observed b...

CVE-2025-27921

A reflected cross-site scripting XSS vulnerability was discovered in Output Messenger before 2.0.63, where unsanitized input could be injected into the web application’s response. This vulnerability occurs when user-controlled input is reflected back into the browser without proper sanitization o...