CVE-2025-37909

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the skb to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to EXT descriptor preven...

CVE-2025-37935

creationtimestamp| type| source ---|---|--- 2025-05-20 15:40:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16998...

CVE-2025-37936

creationtimestamp| type| source ---|---|--- 2025-05-20 15:40:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16997...

CVE-2024-53359

creationtimestamp| type| source ---|---|--- 2025-05-20 15:13:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpmerrb4vh2n...

CVE-2025-45862

creationtimestamp| type| source ---|---|--- 2025-05-20 15:13:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpmerozy2w2h...

CVE-2024-44962

creationtimestamp| type| source ---|---|--- 2025-05-20 14:40:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16985 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-54779

creationtimestamp| type| source ---|---|--- 2025-05-20 14:40:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16983...

CVE-2025-40635

creationtimestamp| type| source ---|---|--- 2025-05-20 13:40:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16977 2025-05-20 15:06:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpme74kp4vy2...

GHSA-3HW7-QJ9H-R835

creationtimestamp| type| source ---|---|--- 2025-05-20 13:40:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16973...

Security update for glib2

This update for glib2 fixes the following issues: CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with gdatetimenewfromiso8601 bsc1240897 Patch Instructions: To install this SUSE update use the SUSE recommended installation method...

CVE-2025-47646

creationtimestamp| type| source ---|---|--- 2025-05-20 10:11:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/37480 2025-05-20 10:28:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/37485 2025-05-23 15:44:34+00:00| seen|...

CVE-2025-36535

creationtimestamp| type| source ---|---|--- 2025-05-20 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-09 2025-05-21 18:06:37+00:00| exploited| https://t.me/informationsecuritychannel/53587 2025-05-21 20:08:47+00:00| seen|...

CVE-2025-41426

creationtimestamp| type| source ---|---|--- 2025-05-20 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-10 2025-05-21 15:59:20+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3lpoxtdwsnc26 2025-05-21 15:59:20+00:00| seen|...

CVE-2025-4322

creationtimestamp| type| source ---|---|--- 2025-05-20 06:39:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16954 2025-05-20 07:18:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lplkbh22a52k 2025-05-20 23:56:44+00:00| seen|...

CVE-2025-2929

The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-2929 Order Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSS

The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-2929 Order Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSS

The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

SUSE CVE-2025-4945

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

CVE-2025-2929: Improper Neutralization of Input During Web Page Generation

The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (May 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...