CVE-2025-26846

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

CVE-2024-13759

Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64 allows local attackers to gain system-level privileges via arbitrary file deletion...

CVE-2025-4538

creationtimestamp| type| source ---|---|--- 2025-05-11 11:28:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15928 2025-05-11 12:05:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lovdj6ghglg2 2025-05-11...

CVE-2025-4534

A vulnerability, which was classified as problematic, has been found in SunGrow Logger1000 01A. This issue affects some unknown processing. The manipulation leads to weak password requirements. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is...

CVE-2025-4529 Seeyon Zhiyuan OA Web Application System ZIP File M3CoreController.class download path traversal

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file...

CVE-2025-47828

CVE-2025-47828 affects Lumi H5P-Nodejs-library before 9.3.3. The root cause is omission of sanitizeHtml for plain text strings, enabling potential Cross-Site Scripting (XSS) risks. Impact is limited to confidentiality and integrity with no reported availability impact; attack vector is network, w...

CVE-2025-4525 Discord WINSTA.dll uncontrolled search path

A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows. Affected by this issue is some unknown functionality in the library WINSTA.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an...

CVE-2025-47814

creationtimestamp| type| source ---|---|--- 2025-05-10 22:27:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15915 2025-05-10 23:27:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lou3qorht3r2 2025-05-11 01:39:05+00:00| seen|...

CVE-2025-47814

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c...

CVE-2025-4507

creationtimestamp| type| source ---|---|--- 2025-05-10 17:38:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15904 2025-05-10 19:30:42+00:00| published-proof-of-concept| Telegram/URtKTzJadoupAu9znx5u6xGbKwitW4xrYQTd2v3oSrAWdo 2025-05-10 20:37:33+00:00| seen|...

CVE-2025-4497

creationtimestamp| type| source ---|---|--- 2025-05-10 07:26:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15886 2025-05-10 07:31:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3losgbynhvh62 2025-05-10...

CVE-2025-3839

creationtimestamp| type| source ---|---|--- 2025-05-10 04:47:13+00:00| seen| https://bsky.app/profile/nyamongo.bsky.social/post/3los55ewsck2u 2026-01-23 05:25:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2xls32e42h 2026-01-23 07:44:19+00:00| seen|...

CVE-2025-4482

creationtimestamp| type| source ---|---|--- 2025-05-09 18:12:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqzlo2o2ra2 2025-05-09 20:00:31+00:00| seen| Telegram/75NSb9FR4fu9qv-QQvoI2QyehVHqHDGkOlpqCZTQx9z33k 2025-05-09 22:31:33+00:0...

CVE-2024-8973 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. It was possible to cause a DoS condition via GitHub import requests using a malicious crafted payload...

CVE-2025-3897

creationtimestamp| type| source ---|---|--- 2025-05-09 11:25:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15712 2025-05-09 11:35:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqdgptiryk2 2025-05-09...

CVE-2025-46392

creationtimestamp| type| source ---|---|--- 2025-05-09 10:25:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15711 2025-05-09 13:37:24+00:00| seen| https://seclists.org/oss-sec/2025/q2/114 2025-05-09 14:32:28+00:00| seen| https://t.me/cvedetector/24943 2025-05-09 15:51:08+00:00| seen|...

CVE-2025-37888

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5createinner,ttctable Add NULL check for mlx5getflownamespace returns in mlx5createinnerttctable and mlx5createttctable to prevent NULL pointer dereference...

CVE-2025-37839

In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb-ssequence check Journal emptiness is not determined by sb-ssequence == 0 but rather by sb-sstart == 0 which is set a few lines above. Furthermore 0 is a valid transaction ID so the check can spuriously...

CVE-2025-20959

Use of implicit intent for sensitive communication in Wi-Fi P2P service prior to SMR May-2025 Release 1 allows local attackers to access sensitive information...

CVE-2025-37841

In the Linux kernel, the following vulnerability has been resolved: pm: cpupower: bench: Prevent NULL dereference on malloc failure If malloc returns NULL due to low memory, 'config' pointer can be NULL. Add a check to prevent NULL dereference...