PT-2025-23293 · Undefined · Undefined

CVE-2022-26304 - Apache HTTP Server Denial of Service CVE ID : CVE-2022-26304 Published : May 28, 2025, 5:15 p.m. | 16 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused Severity: 0.0 | NA Visit the link for mo...

CVE-2025-30087

Best Practical RT Request Tracker 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL...

PT-2025-23327 · Undefined · Undefined

CVE-2022-44614 - Apache HTTP Server Command Injection CVE ID : CVE-2022-44614 Published : May 28, 2025, 7:15 p.m. | 2 hours, 16 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused Severity: 0.0 | NA Visit the li...

CVE-2025-32440

creationtimestamp| type| source ---|---|--- 2025-05-27 22:41:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114582204188066200 2025-05-27 23:01:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq6s7htw6z2q...

WordPress XStore Theme - SQL Injection

SQL Injection vulnerability in the WordPress XStore Theme CVE-2024-33559. This flaw allows remote unauthenticated attackers to execute arbitrary SQL queries via the 's' query parameter in a POST request. id: CVE-2024-33559 info: name: WordPress XStore Theme - SQL Injection author: Haliteroglu...

CVE-2025-5064

creationtimestamp| type| source ---|---|--- 2025-05-27 20:59:19+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6lf5divm52 2025-05-29 22:46:39+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lqdsd2wiym2s 2025-06-03...

CVE-2025-5065

creationtimestamp| type| source ---|---|--- 2025-05-27 20:59:18+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6lf3gklt72 2025-05-29 22:46:42+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lqdsd5ytzz2x 2025-06-03...

CVE-2025-5283

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-5250

A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-5245

creationtimestamp| type| source ---|---|--- 2025-05-27 15:50:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq624go2u2a2...

CVE-2025-27701

In the function processcryptocmd, the values of ptrsi can be potentially equal to NULL which is valid value after calling slicemaparray. Later this values will be derefenced without prior NULL check, which can lead to local Temporary DoS or OOB Read, leading to information disclosure...

CVE-2025-3704

creationtimestamp| type| source ---|---|--- 2025-05-27 14:48:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17643 2025-05-27 15:50:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq624djpv2a2...

CVE-2025-48797 Gimp: multiple heap buffer overflows in tga parser

A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow...

CVE-2025-5268

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17625 2025-05-27 13:16:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5rffkkfyz2 2025-05-27 13:53:09+00:00| seen|...

CVE-2025-5270

In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This vulnerability was fixed in Firefox 139 and Thunderbird 139...

CVE-2025-4412

creationtimestamp| type| source ---|---|--- 2025-05-27 10:48:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17619 2025-05-27 10:50:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5jf5td7my2 2025-05-27 13:46:48+00:00| seen|...

CVE-2025-48054

Radashi is a TypeScript utility toolkit. Prior to version 12.5.1, the set function within the Radashi library is vulnerable to prototype pollution. If an attacker can control parts of the path argument to the set function, they could potentially modify the prototype of all objects in the JavaScri...

CVE-2025-5227

creationtimestamp| type| source ---|---|--- 2025-05-27 03:36:06+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4r3gk3cvj2 2025-05-27 03:47:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17599...

Security Advisory 0120

Security Advisory 0120 . CSAF PDF Date: May 27, 2025 Revision | Date | Changes ---|---|--- 1.0 | May 27, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-2826 CVSSv3.1 Base Score: 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Common Weakness Enumeration: CWE-284: Improper Access...

Uncovering Black-Hat SEO Based Fake E-Commerce Scam Groups from Their Redirectors and Websites

While law enforcements agencies and cybercrime researchers are working hard, fake E-commerce scam is still a big threat to Internet users. One of the major techniques to victimize users is luring them by black-hat search-engine-optimization SEO; making search engines display their lure pages as i...