PT-2025-35: Local Privilege Escalation (LPE) in Tunnelblick

The vulnerability was identified in Tunnelblick, versions 3.5beta06 to 6.1beta2. The discovered vulnerability allows an attacker to escalate privileges from a normal user to root. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 22.04.2025 Recommendations: Update to...

WordPress wProject Theme < 5.8.0 is vulnerable to Privilege Escalation

Software wProject Type Theme Vulnerable versions 5.8.0 Fixed in 5.8.0 OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2025-39366 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID dc57f98abe0c Credits Dave Jong Patchstack Required privileg...

CVE-2021-33420

creationtimestamp| type| source ---|---|--- 2025-04-21 20:03:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12753...

GHSA-5MWP-XW7P-5J27

creationtimestamp| type| source ---|---|--- 2025-04-21 20:03:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12751...

CVE-2022-42820

creationtimestamp| type| source ---|---|--- 2025-04-21 20:03:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12745...

GHSA-47F6-5GQ3-VX9C

creationtimestamp| type| source ---|---|--- 2025-04-21 16:03:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12699...

CVE-2024-12543

creationtimestamp| type| source ---|---|--- 2025-04-21 16:02:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12690 2025-04-21 18:59:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lndtv7oqmo2c 2025-04-21 19:49:43+00:00| seen| https://t.me/cvedetector/23457 2025-08-09...

GHSA-GM2P-WF5C-W3PJ

creationtimestamp| type| source ---|---|--- 2025-04-21 16:02:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12688 2025-04-21 18:31:51+00:00| published-proof-of-concept| Telegram/5EJUZnGupE7gi7RJmr2FV0ZRgpmrRFRfEIarwGmxg4P8ExE...

CVE-2025-32793

creationtimestamp| type| source ---|---|--- 2025-04-21 16:02:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12686 2025-04-21 18:59:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lndtv7rzho2y 2025-04-21 19:49:42+00:00| seen|...

CVE-2025-2298

creationtimestamp| type| source ---|---|--- 2025-04-21 16:02:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12684 2025-04-21 18:09:13+00:00| seen| https://t.me/cvedetector/23438 2025-04-21 18:31:51+00:00| published-proof-of-concept| Telegram/5EJUZnGupE7gi7RJmr2FV0ZRgpmrRFRfEIarwGmxg4P8ExE...

GHSA-8C28-5MP7-V24H

creationtimestamp| type| source ---|---|--- 2025-04-21 15:02:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12668...

CVE-2024-42301

creationtimestamp| type| source ---|---|--- 2025-04-21 13:32:31+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3lndbn7ih6n2z...

CVE-2024-38428

creationtimestamp| type| source ---|---|--- 2025-04-21 11:02:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12639 2025-07-08 07:10:38+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2025-07-08 07:10:48+00:00| seen|...

CVE-2025-43963

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access because splitcol and splitrow values are not checked in 0x041f tag processing...

Fedora: Security Advisory (FEDORA-2025-256a86d7c8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:1342-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:1332-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-e923d51676)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:1333-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:1332-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...