CVE-2025-4287

A problematic vulnerability has been identified in PyTorch version 2.6.0 with CUDA 12.4. The affected component is the torch.cuda.nccl.reduce function within the torch/cuda/nccl.py file. Exploitation of this vulnerability can lead to a denial-of-service condition. The attack can be launched from...

CVE-2025-4312

creationtimestamp| type| source ---|---|--- 2025-05-06 04:20:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15043 2025-05-06 06:21:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajp7vqu2j 2025-05-06 07:00:55+00:00| published-proof-of-concept|...

CVE-2025-47301

creationtimestamp| type| source ---|---|--- 2025-05-06 03:20:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15040 2025-05-06 06:21:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajobbnn2h...

CVE-2025-4303

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack ma...

CVE-2025-2509

Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to VM escape via crafted vertex elements data triggering an out-of-bounds read in utilformatdescription...

Photon OS 5.0: Gnuplot PHSA-2025-5.0-0516

An update of the gnuplot package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0516. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-44074

creationtimestamp| type| source ---|---|--- 2025-05-05 22:19:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15008 2025-05-06 00:21:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lohmham6eu2r 2025-05-06 01:55:43+00:00| seen|...

CVE-2025-4288

creationtimestamp| type| source ---|---|--- 2025-05-05 21:20:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14999 2025-05-06 00:15:07+00:00| exploited| https://t.me/cvedetector/24498 2025-05-06 00:21:53+00:00| seen|...

CVE-2025-47256

creationtimestamp| type| source ---|---|--- 2025-05-05 21:02:56+00:00| published-proof-of-concept| Telegram/YaDf5xJ3685njZbAKRVppFbIpFzplLD7yW1OQGHI6Xa2lo 2025-05-06 20:21:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15205 2025-05-06 22:26:57+00:00| seen|...

CVE-2025-46734

creationtimestamp| type| source ---|---|--- 2025-05-05 20:20:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14988 2025-05-06 00:15:15+00:00| seen| https://t.me/cvedetector/24505 2025-05-06 00:21:52+00:00| seen|...

CVE-2025-45611

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...

CVE-2025-46734

league/commonmark is a PHP Markdown parser. A cross-site scripting XSS vulnerability in the Attributes extension of the league/commonmark library versions 1.5.0 through 2.6.x allows remote attackers to insert malicious JavaScript calls into HTML. The league/commonmark library provides configurati...

CVE-2025-43851

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The modelchoose variable takes user input e.g. a path to a model and passes it to the uvr function in vr.py. In uvr , a new instance...

CVE-2024-51991

October is a Content Management System CMS and web platform. A vulnerability in versions prior to 3.7.5 affects authenticated administrators with sites that have the media.cleanvectors configuration enabled. This configuration will sanitize SVG files uploaded using the media manager. This...

CVE-2025-45042

creationtimestamp| type| source ---|---|--- 2025-05-05 16:41:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3logspwquja2h 2025-05-05 20:49:26+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3lohale4ehx2z...

The AI chatbot cop squad is here (Lock and Code S06E09)

This week on the Lock and Code podcast … “Heidi” is a 36-year-old, San Francisco-born, divorced activist who is lonely, outspoken, and active on social media. “Jason” is a shy, bilingual teenager whose parents immigrated from Ecuador who likes anime, gaming, comic books, and hiking. Neither of th...

CVE-2025-4299

creationtimestamp| type| source ---|---|--- 2025-05-05 12:28:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114455221831786910 2025-05-06 00:19:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15014 2025-05-06 00:36:52+00:00| seen|...

CVE-2025-3583

creationtimestamp| type| source ---|---|--- 2025-05-05 06:18:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14838 2025-05-05 10:01:24+00:00| seen| https://t.me/cvedetector/24441 2025-05-05 10:21:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3log5hwzg732p...

CVE-2025-4263

creationtimestamp| type| source ---|---|--- 2025-05-05 04:18:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14831 2025-05-05 06:15:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofpri3bsn2t 2025-05-05 07:30:45+00:00| exploited|...

CVE-2025-4261

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...