CVE-2025-37810

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event buffer length. Check...

CVE-2025-37822

In the Linux kernel, the following vulnerability has been resolved: riscv: uprobes: Add missing fence.i after building the XOL buffer The XOL execute out-of-line buffer is used to single-step the replaced instructions for uprobes. The RISC-V port was missing a proper fence.i i$ flushing after...

CVE-2025-46727

Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, Rack::QueryParser parses query strings and application/x-www-form-urlencoded bodies into Ruby data structures without imposing any limit on the number of parameters, allowing attackers to send requests with...

CVE-2025-36557

creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15452 2025-05-08 00:27:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomnonizgw2o 2025-05-08 00:52:38+00:00| seen| https://t.me/cvedetector/24766...

CVE-2025-36546

creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15451 2025-05-08 00:27:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomnonwo4a2p 2025-05-08 00:52:50+00:00| seen| https://t.me/cvedetector/24774 2025-05-09...

CVE-2025-43878

creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15450 2025-05-08 00:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomnoo5b5322 2025-05-08 00:52:45+00:00| seen| https://t.me/cvedetector/24771...

CVE-2025-36504

creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15446 2025-05-07 23:30:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomkd3xzqbc2 2025-05-08 00:27:21+00:00| seen|...

CVE-2025-46826 insa-auth Open-Redirect on provided CAS server login endpoint

insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing basic student information name and number. However, the issue posed minimal risk, was never exploited, and had limited...

CVE-2025-46828

creationtimestamp| type| source ---|---|--- 2025-05-07 21:31:33+00:00| seen| https://t.me/cvedetector/24735 2025-05-07 22:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lomgxuwups2p...

CVE-2025-4043 Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code

An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot...

CVE-2025-20162

creationtimestamp| type| source ---|---|--- 2025-05-07 18:41:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lom2f6b4ir2l...

CVE-2025-20154

creationtimestamp| type| source ---|---|--- 2025-05-07 18:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lom2f65rko2h...

CVE-2025-20197

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

CVE-2025-20140

A vulnerability in the Wireless Network Control daemon wncd of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent wireless attacker to cause a denial of service DoS condition. This vulnerability is due to improper memory management. An attacker could...

CVE-2025-20181

A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the...

CVE-2025-12353

creationtimestamp| type| source ---|---|--- 2025-05-07 15:48:27+00:00| seen| https://t.me/NinjaSec/299 2025-11-08 05:46:00+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m53vbopjwcr2 2025-11-08 06:24:26+00:00| seen|...

CVE-2025-47684

Cross-Site Request Forgery CSRF vulnerability in Smaily Smaily for WP smaily-for-wp allows Cross Site Request Forgery.This issue affects Smaily for WP: from n/a through = 3.1.7...

WordPress aBlocks plugin <= 1.9.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy Patchstack Alliance in WordPress Plugin aBlocks versions = 1.9.2...

CVE-2025-47625 WordPress DoFollow Case by Case <= 3.5.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados DoFollow Case by Case allows Stored XSS. This issue affects DoFollow Case by Case: from n/a through 3.5.1...

CVE-2025-47612

CVE-2025-47612 (ClickWhale) is a Missing Authorization vulnerability in the flowdee ClickWhale WordPress plugin (affected: 2.4.6 and earlier). The issue arises from incorrectly configured access control, enabling unauthorized access due to insufficient authorization checks. NVD/vectors indicate a...