PT-2025-23295 · Dassault Systèmes · 3Dexperience

Name of the Vulnerable Software and Affected Versions: Collaborative Industry Innovator versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2025x Description: A stored Cross-site Scripting XSS vulnerability in the Compare feature allows an attacker to execute arbitrary script code in a user's...

CVE-2024-7108

Incorrect Authorization vulnerability in National Keep Cyber Security Services CyberMath allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CyberMath: before CYBM.240816253...

CVE-2013-4826

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647...

BountyBench: Dollar Impact of AI Agent Attackers and Defenders on Real-World Cybersecurity Systems

AI agents have the potential to significantly alter the cybersecurity landscape. To help us understand this change, we introduce the first framework to capture offensive and defensive cyber-capabilities in evolving real-world systems. Instantiating this framework with BountyBench, we set up 25...

CVE-2025-303797

creationtimestamp| type| source ---|---|--- 2025-05-13 16:58:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0155...

BELL-CVE-2025-37822

Bulletin has no description...

CVE-2025-4148

creationtimestamp| type| source ---|---|--- 2025-05-01 05:48:31+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114431001297247363 2025-05-01 05:56:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo3mskiusm22 2025-05-01 06:00:40+00:00| published-proof-of-concept...

CVE-2025-46275

creationtimestamp| type| source ---|---|--- 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06 2025-04-24 23:09:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13362 2025-04-25 00:19:53+00:00| seen|...

BELL-CVE-2025-22105

Bulletin has no description...

Vulnerability fixed in Gladinet CentreStack

Gladinet has fixed a vulnerability in CentreStack Versions up to 16.1.10296.56315. The vulnerability is in the way hard-coded machineKeys and cryptographic keys are used, resulting in a serious deserialization vulnerability. The vulnerability allows a malicious party to generate rogue ViewState...

CVE-2025-277527

creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...

CVE-2025-298237

creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...

CVE-2025-31173

creationtimestamp| type| source ---|---|--- 2025-04-07 05:48:54+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114295107323797874 2025-04-07 06:32:02+00:00| published-proof-of-concept| Telegram/EsnBsJ3Ssj-UYUC8Y7f1dDSxyldCCaK6EjJlv4mvyH2MMw 2025-04-07 07:17:46+00:00| seen|...

CVE-2025-3259

creationtimestamp| type| source ---|---|--- 2025-04-04 17:36:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10504 2025-04-04 18:16:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114281060422401284 2025-04-04 18:16:35+00:00| seen|...

CVE-2025-211996

creationtimestamp| type| source ---|---|--- 2025-03-11 17:45:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0081...

CVE-2025-24035

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:40:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114145022545782390 2025-03-11 17:48:34+00:00| seen|...

CVE-2025-27912

creationtimestamp| type| source ---|---|--- 2025-03-11 08:38:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7120 2025-03-11 09:31:03+00:00| seen| Telegram/VmMuGE7Rb8M0CTKtbBCx8A-ZtXlhfTER7CBMGSEtWA4Slk 2025-03-11 09:48:37+00:00| seen|...

CVE-2025-25361

creationtimestamp| type| source ---|---|--- 2025-03-06 22:12:27+00:00| seen| https://t.me/cvedetector/19740 2025-03-07 20:40:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6883 2025-03-07 21:49:00+00:00| seen|...

CVE-2024-48246

creationtimestamp| type| source ---|---|--- 2025-03-05 19:59:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljnrds4wdd2h 2025-03-05 22:47:49+00:00| seen| https://t.me/cvedetector/19658 2025-03-06 15:10:41+00:00| published-proof-of-concept|...

Linux Distros Unpatched Vulnerability : CVE-2015-8388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCRE before 8.38 mishandles the /?=di?=?1|?=./ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a deni...