CVE-2025-30357

creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12466 2025-04-18 16:34:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln42frbshg2b 2025-04-18 17:27:36+00:00| seen|...

CVE-2025-3790

creationtimestamp| type| source ---|---|--- 2025-04-18 14:55:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3uugto3vs2 2025-04-18 16:34:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln42fr2yy62d 2025-04-18...

CVE-2025-32790

creationtimestamp| type| source ---|---|--- 2025-04-18 12:58:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12419 2025-04-18 14:55:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3uuk2l7ws2 2025-04-18...

GHSA-JP6M-V4GW-5VGP

creationtimestamp| type| source ---|---|--- 2025-04-18 12:58:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12419...

WordPress AnalyticsWP plugin <= 2.1.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin AnalyticsWP versions = 2.1.2...

CVE-2025-38575

creationtimestamp| type| source ---|---|--- 2025-04-18 07:59:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12401 2025-04-18 09:39:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114358298032803100...

CVE-2025-37785

In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' dir entry with reclen == block size results in out-of-bounds read later on, when the corrupted directory is removed...

CVE-2025-37893

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix off-by-one error in buildprologue Vincent reported that running BPF progs with tailcalls on LoongArch causes kernel hard lockup. Debugging the issues shows that the JITed image missing a jirl instruction at th...

CVE-2025-40014

In the Linux kernel, the following vulnerability has been resolved: objtool, spi: amd: Fix out-of-bounds stack access in amdsetspifreq If speedhz AMDSPIMINHZ, amdsetspifreq iterates over the entire amdspifreq array without breaking out early, causing 'i' to go beyond the array bounds. Fix that by...

CVE-2025-39755

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix cb7210 pcmcia Oops The pcmciadriver struct was still only using the old .name initialization in the drv field. This led to a NULL pointer deref Oops in strcmp called from pcmciaregisterdriver. Initialize the...

CVE-2025-40114

In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075readinttimems The array contains only 5 elements, but the index calculated by veml6075readinttimeindex can range from 0 to 7, which could lead to out-of-bounds access. The check...

CVE-2025-39735

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in eaget During the "sizecheck" label in eaget, the code checks if the extended attribute list xattr size matches easize. If not, it logs "eaget: invalid extended attribute" and calls printhexdump...

CVE-2025-40325

In the Linux kernel, the following vulnerability has been resolved: md/raid10: wait barrier before returning discard request with REQNOWAIT raid10handlediscard should wait barrier before returning a discard bio which has REQNOWAIT. And there is no need to print warning calltrace if a discard bio...

CVE-2025-39728

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsungclkinit With UBSANARRAYBOUNDS=y, I'm hitting the below panic due to dereferencing ctx-clkdata.hws before setting ctx-clkdata.num = nrclks. Move that up to fix the crash. UBSAN: array index...

CVE-2025-38479

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: free irq correctly in remove path Add fsledma-txirq/errirq check to avoid below warning because no errirq at i.MX9 platform. Otherwise there will be kernel dump: WARNING: CPU: 0 PID: 11 at...

CVE-2025-39470

creationtimestamp| type| source ---|---|--- 2025-04-18 04:58:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12388 2025-04-18 06:23:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln2ybyfxqf2j 2025-04-18 06:48:54+00:00| seen|...

WordPress Sirat Theme <= 1.5.1 is vulnerable to Broken Access Control

Software Sirat Type Theme Vulnerable versions = 1.5.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-39385 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ed36602c752c Credits Peter Thaleikis Required privilege...

CVE-2025-3509

creationtimestamp| type| source ---|---|--- 2025-04-17 22:58:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12374 2025-04-18 02:53:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln2mk6kpep2h 2025-04-18 03:12:04+00:00| seen| https://t.me/cvedetector/23290 2025-04-22...

CVE-2025-29451

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12372 2025-04-17 22:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pajc52y 2025-04-18 00:41:40+00:00| seen|...

CVE-2025-29456

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12364 2025-04-17 22:53:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274prrq72d 2025-04-18 03:12:07+00:00| seen|...