CVE-2020-9501

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...

CVE-2020-11607

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Notification exposure occurs in Lockdown mode because of the Edge Lighting application. The Samsung ID is SVE-2020-16680 April 2020...

CVE-2020-11606

An issue was discovered on Samsung mobile devices with Q10.0 software. Information about application preview in the Secure Folder leaks on a locked device. The Samsung ID is SVE-2019-16463 April 2020...

Security Bulletin: WebSphere Service Registry and Repository (WSSR) is affected by IBM SDK, Java Technology Edition Quarterly CPU - Apr 2025 - Includes Oracle April 2024 CPU plus CVE-2025-4447

Summary WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository, and it uses the IBM® Java SDK. Information about the IBM® Java SDK April 2025 CPU is available in a Security Bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition

Summary This bulletin for IBM SDK, Java Technology Edition covers all applicable Java SE CVEs published by Oracle as part of their April 2025 Critical Patch Update, plus CVE-2025-4447. For more information please refer to Oracle's April 2025 CPU Advisory and the CVE links referenced below...

A week in security (May 4 – May 10)

Last week on Malwarebytes Labs: The AI chatbot cop squad is here Lock and Code S06E09 Android fixes 47 vulnerabilities, including one zero-day. Update as soon as you can! "Your privacy is a promise we don’t break": Dating app Raw exposes sensitive user data FBI issues warning as scammers target...

WordPress多款产品 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers. A code injection...

WordPress多款产品 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL, and the...

WordPress plugin April Framework、Auteur Framework、Benaa Framework和Beyot Framework 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Packet Storm New Exploits for April, 2025

This archive contains all of the 166 exploits added to Packet Storm in April, 2025...

CVE-2025-4136

creationtimestamp| type| source ---|---|--- 2025-04-30 21:55:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo2rxiziqb2h 2025-05-01 00:37:01+00:00| seen| https://t.me/cvedetector/24160...

CVE-2025-27611

creationtimestamp| type| source ---|---|--- 2025-04-30 21:55:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo2rxilxrt24 2025-05-01 00:36:57+00:00| seen| https://t.me/cvedetector/24158...

CVE-2025-4139

creationtimestamp| type| source ---|---|--- 2025-04-30 21:15:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14166 2025-04-30 21:48:23+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114429113294159822 2025-04-30 21:55:52+00:00| seen|...

CVE-2022-27562

creationtimestamp| type| source ---|---|--- 2025-04-30 21:15:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14162 2025-04-30 21:55:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo2rxhwxgh2l 2025-05-01 00:36:51+00:00| seen| https://t.me/cvedetector/24154...

RHSA-2023:5455

creationtimestamp| type| source ---|---|--- 2025-04-30 20:14:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14151 2025-04-30 20:14:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14152...

CVE-2025-30390

creationtimestamp| type| source ---|---|--- 2025-04-30 17:21:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114428064949898924 2025-04-30 19:48:34+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114428642039876617 2025-04-30 20:30:47+00:00| seen|...

CVE-2025-3599

creationtimestamp| type| source ---|---|--- 2025-04-30 17:13:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14090 2025-04-30 18:00:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo2esvzxd424 2025-04-30 20:25:46+00:00| seen| https://t.me/cvedetector/24129...

CVE-2025-46342

creationtimestamp| type| source ---|---|--- 2025-04-30 15:48:38+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114427698692598891 2025-04-30 15:59:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427741773438031 2025-04-30 16:30:35+00:00| seen|...

CVE-2025-32973

creationtimestamp| type| source ---|---|--- 2025-04-30 15:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114427698608004436 2025-04-30 16:30:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo27ru6vjs2n 2025-04-30 17:32:01+00:00| seen|...

CVE-2025-4122

creationtimestamp| type| source ---|---|--- 2025-04-30 15:13:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14059 2025-04-30 17:55:08+00:00| seen| https://t.me/cvedetector/24109 2025-04-30 18:00:39+00:00| seen|...