CVE-2025-32986

creationtimestamp| type| source ---|---|--- 2025-04-25 21:08:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13532 2025-04-25 23:20:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnoedg2hzl2b 2025-04-26 01:52:34+00:00| seen| https://t.me/cvedetector/23787 2025-04-28...

CVE-2025-43859

creationtimestamp| type| source ---|---|--- 2025-04-24 19:09:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114394512917622666 2025-04-24 21:48:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114395140063306383 2025-04-24 22:24:48+00:00| seen|...

CVE-2025-3840 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

An improper neutralization of input vulnerability was identified in the End of Life EOL OVA based connect installer component which is deployed for installation purposes in a customer network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. An...

CVE-2025-3818

A vulnerability, which was classified as critical, was found in webpy web.py 0.70. Affected is the function PostgresDB.processinsertquery of the file web/db.py. The manipulation of the argument seqname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...

CVE-2024-29643

creationtimestamp| type| source ---|---|--- 2025-04-18 14:55:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3uuv2hm5l2...

CVE-2025-39989

In the Linux kernel, the following vulnerability has been resolved: x86/mce: use iscopyfromuser to determine copy-from-user context Patch series "mm/hwpoison: Fix regressions in memory failure handling", v4. 1. What am I trying to do: This patchset resolves two critical regressions related to...

CVE-2024-46089

74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...

CVE-2025-22060

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM memory, and the cached shadow SRAM information, from concurrent modifications. Both the TCAM and SRAM tables are indirectly accessed by configuring an...

CVE-2025-29662

A RCE vulnerability in the core application in LandChat 3.25.12.18 allows an unauthenticated attacker to execute system code via remote network access...

CVE-2025-22030

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix cryptofreeacomp deadlock in zswapcpucompdead Currently, zswapcpucompdead calls cryptofreeacomp while holding the per-CPU acompctx mutex. cryptofreeacomp then holds scomplock through cryptoexitscompopsasync. On the...

CVE-2025-30686

...

CVE-2025-21583

...

CVE-2025-2567 Lantronix Xport Missing Authentication for Critical Function

An attacker could modify or disable settings, disrupt fuel monitoring and supply chain operations, leading to disabling of ATG monitoring. This would result in potential safety hazards in fuel storage and transportation...

CVE-2025-24358

gorilla/csrf provides Cross Site Request Forgery CSRF prevention middleware for Go web applications & services. Prior to 1.7.2, gorilla/csrf does not validate the Origin header against an allowlist. Its executes its validation of the Referer header for cross-origin requests only when it believes...

CVE-2025-32941

creationtimestamp| type| source ---|---|--- 2025-04-15 04:38:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmtaycjrde2h 2025-04-15 07:24:04+00:00| seen| https://t.me/cvedetector/22908...

WordPress ORDER POST plugin <= 2.0.2 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Avraham Shemesh in WordPress Plugin ORDER POST versions = 2.0.2...

CVE-2025-27078

creationtimestamp| type| source ---|---|--- 2025-04-08 19:22:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmd755jc5t24...

CVE-2024-43067

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory...

CVE-2025-31900

creationtimestamp| type| source ---|---|--- 2025-04-03 15:07:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llw6jxc7n22z 2025-04-03 17:44:37+00:00| seen| https://t.me/cvedetector/21982...