CVE-2025-27513

creationtimestamp| type| source ---|---|--- 2025-03-05 18:55:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6584 2025-03-05 22:47:43+00:00| seen| https://t.me/cvedetector/19654 2025-08-18 13:31:24+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19...

WordPress bbPress plugin <= 2.6.11 - Cross-Site Request Forgery to Limited Privilege Escalation vulnerability

Cross-Site Request Forgery to Limited Privilege Escalation vulnerability discovered by Brian Mungai in WordPress Plugin bbPress versions = 2.6.11...

CVE-2025-1425

creationtimestamp| type| source ---|---|--- 2025-03-04 15:31:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6372 2025-03-04 18:21:16+00:00| seen| https://t.me/cvedetector/19518 2025-08-18 18:31:00+00:00| seen| MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7...

CVE-2025-0360

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API...

WordPress Ninja Pages plugin <= 1.4.2 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Manas Talekar in WordPress Plugin Ninja Pages versions = 1.4.2...

Linux Distros Unpatched Vulnerability : CVE-2015-2922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ndiscrouterdiscovery function in net/ipv6/ndisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6...

GHSA-GH9Q-2XRM-X6QV CGI has Denial of Service (DoS) potential in Cookie.parse

There is a possibility for DoS by in the cgi gem. This vulnerability has been assigned the CVE identifier CVE-2025-27219. We recommend upgrading the cgi gem. Details CGI::Cookie.parse took super-linear time to parse a cookie string in some cases. Feeding a maliciously crafted cookie string into t...

Information Exposure

Overview Flask-AppBuilder is a simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Affected versions of this package are vulnerable to Information Exposure due to observable...

CVE-2025-1859

creationtimestamp| type| source ---|---|--- 2025-03-03 09:35:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6162 2025-03-03 11:21:29+00:00| seen| https://t.me/cvedetector/19315...

CVE-2025-1840

creationtimestamp| type| source ---|---|--- 2025-03-03 00:29:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6118 2025-03-03 01:30:33+00:00| published-proof-of-concept| Telegram/pstnQ8ZZOX-2Yeq-UDXjBXIKQOIrf-BFgYyilC58DHdCcZU 2025-03-03 02:34:12+00:00| seen|...

ASB-A-375408314

In processserviceattrrsp of sdpdiscovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Independent Analyst Firm: Qualys Recognized as a Leader in Attack Surface Management

As the modern attack surface continues to grow in complexity, the need for simplified asset discovery and risk assessment has never been more acute. In 2021, Qualys introduced CyberSecurity Asset Management CSAM, a visionary ASM offering designed to bolster the customer’s coverage of the attack...

CVE-2025-1300

creationtimestamp| type| source ---|---|--- 2025-02-28 13:27:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5901 2025-02-28 13:49:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljakcuonjd2y 2025-02-28 15:21:22+00:00| seen| https://t.me/cvedetector/19150...

SUSE CVE-2025-21764

In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndiscallocskb ndiscallocskb can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF...

WordPress WooCommerce Ultimate Gift Card plugin < 2.9.3 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Tonn in WordPress Plugin WooCommerce Ultimate Gift Card versions 2.9.3...

CVE-2025-1738

creationtimestamp| type| source ---|---|--- 2025-02-27 13:27:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5673 2025-02-27 15:53:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6asjgo6a2v 2025-02-27 16:45:11+00:00| seen| https://t.me/cvedetector/19044 2025-08-22...

WordPress Cardealer theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Change and Delete JS and CSS Files vulnerability

Missing Authorization to Authenticated Subscriber+ Change and Delete JS and CSS Files vulnerability discovered by István Márton in WordPress Theme Car Dealer versions = 1.6.4...

AZL-58898 CVE-2025-21764 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndiscallocskb ndiscallocskb can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF...

SUSE CVE-2022-49663

In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume mac header is set in skbtunnelcheckpmtu Recently added debug in commit f9aefd6b2aa3 "net: warn if mac header was not set" caught a bug in skbtunnelcheckpmtu, as shown in this syzbot report 1. In ndostartxmi...

Cisco FXOS Software Arbitrary File Write (cisco-sa-fxos-arbitrary-file-BLk6YupL)

According to its self-reported version, Cisco FXOS is affected by a vulnerability. The vulnerability lies in the Link Layer Discovery Protocol LLDP feature of Cisco FXOS Software and could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device...