9439 matches found
CVE-2024-58101
creationtimestamp| type| source ---|---|--- 2025-05-14 20:32:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16405 2025-05-14 22:57:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63wgrfos2w 2025-10-13 11:24:21+00:00| seen|...
CVE-2025-33104 IBM WebSphere Application Server cross
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2025-4664
creationtimestamp| type| source ---|---|--- 2025-05-14 18:31:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16356 2025-05-14 18:57:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp5oizyvnz2w 2025-05-14 20:40:49+00:00| seen|...
CVE-2025-20103
Insufficient resource pool in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...
CVE-2025-3932
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...
GHSA-G5MQ-PRX7-C588
creationtimestamp| type| source ---|---|--- 2025-05-14 16:19:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114507092132283688 2025-05-14 16:33:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16329...
CVE-2024-52601
iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, anyone with an account having portal access can have read access to objects they're not allowed to see by querying an unprotected route. Versions 2.7.12, 3.1.3, and 3.2.1 contain a fix for the issue...
CVE-2025-24969 iTop portal user can see any other contact's picture
iTop is an web based IT Service Management tool. Prior to version 3.2.1, a portal user can see any other contacts picture by changing the picture ID in the URL. Version 3.2.1 contains a patch for the issue...
CVE-2025-0134
creationtimestamp| type| source ---|---|--- 2025-05-14 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0134 2025-05-14 18:32:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16367 2025-05-14 19:03:19+00:00| seen|...
CVE-2025-0137
creationtimestamp| type| source ---|---|--- 2025-05-14 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0137 2025-05-14 18:31:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16363 2025-05-14 19:03:21+00:00| seen|...
CVE-2025-3769
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.92 via the 'viewbookingsummaryinlightbox' due to missing validation on a user controlled key. This makes it possible...
CVE-2025-4430
creationtimestamp| type| source ---|---|--- 2025-05-14 11:00:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4tna6kslj2 2025-05-14 11:31:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16303 2025-05-14 13:02:53+00:00| seen|...
CVE-2025-47891
creationtimestamp| type| source ---|---|--- 2025-05-14 06:07:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp4diojxfd2h...
CVE-2025-26795
creationtimestamp| type| source ---|---|--- 2025-05-14 00:48:43+00:00| seen| https://seclists.org/oss-sec/2025/q2/141 2025-05-14 11:00:15+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4tncrgl7p2 2025-05-14 11:31:20+00:00| seen|...
CVE-2025-45835
A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENTLENGTH, causing the program to crash and...
CVE-2025-43563
creationtimestamp| type| source ---|---|--- 2025-05-14 00:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3pehkwoq2o 2025-05-15 04:32:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16447...
GLSA-202505-07 : FreeType: Remote Code Execution
The remote host is affected by the vulnerability described in GLSA-202505-07 FreeType: Remote Code Execution Multiple vulnerabilities have been discovered in FreeType. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fr...
CVE-2025-44879
CVE-2025-44879 concerns WS-WN572HP3 (V230525) with a buffer overflow in the file path "/www/cgi-bin/upload.cgi". The described impact is a Denial of Service (DoS) via a crafted HTTP request. Concrete details reported across multiple sources confirm the affected device and vulnerable component, wi...
