CVE-2025-29906

Finit is a fast init for Linux systems. Versions starting from 3.0-rc1 and prior to version 4.11 bundle an implementation of getty for the tty configuration directive that can bypass /bin/login, i.e., a user can log in as any user without authentication. This issue has been patched in version 4.1...

CVE-2025-3910

creationtimestamp| type| source ---|---|--- 2025-04-29 21:13:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13924 2025-04-29 23:50:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw2uaqv2o 2025-04-30 01:11:55+00:00| seen| https://t.me/cvedetector/24057 2025-11-03...

CVE-2025-46348

YesWiki prior to 4.5.4 allows unauthenticated backups via the archives API, enabling archive creation and download with predictable filenames. This undermines authentication, exposes potentially sensitive site data, and can enable DoS by mass archive creation. The issue has been fixed in version ...

CVE-2025-4089

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox 138 and Thunderbird 138...

CVE-2025-46347

creationtimestamp| type| source ---|---|--- 2025-04-29 18:12:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13892 2025-04-29 19:50:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lny2ilg6ii22 2025-04-29 21:01:12+00:00| seen|...

CVE-2025-4074

creationtimestamp| type| source ---|---|--- 2025-04-29 18:12:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13889 2025-04-29 19:50:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lny2ilmsdj2h 2025-04-29 20:01:14+00:00| published-proof-of-concept|...

CVE-2025-46349

creationtimestamp| type| source ---|---|--- 2025-04-29 18:12:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13883 2025-04-29 19:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lny2il475r2n 2025-04-29 20:01:14+00:00| published-proof-of-concept|...

CVE-2025-4092

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of these could have been...

CVE-2025-23180

CWE-250: Execution with Unnecessary Privileges...

CVE-2025-0716

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and also negatively affect...

CVE-2025-4082

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges. This bug only affects...

CGA-MRFX-6P3F-9C8H

Bulletin has no description...

CVE-2025-46346

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, a stored cross-site scripting XSS vulnerability was discovered in the application’s comments feature. This issue allows a malicious actor to inject JavaScript payloads that are stored and later executed in the browser of any user...

CVE-2025-23179 Ribbon Communications - CWE-798: Use of Hard-coded Credentials

CWE-798: Use of Hard-coded Credentials...

CVE-2025-4085

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn32i2222s 2025-04-29 16:49:38+00:00| seen| https://t.me/cvedetector/23997 2026-04-13 17:55:16+00:00| seen| Telegram/Rk7hMmIKYATXlhQfFOdK5MJxTVeQfOKjkNlqS7PgiJwldc...

CVE-2025-4088

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn32enqv2d 2025-04-29 16:49:42+00:00| seen| https://t.me/cvedetector/23998...

CVE-2025-4062

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn326fee2j 2025-04-29 16:49:51+00:00| seen| https://t.me/cvedetector/24006...

CVE-2025-30194

A flaw was found in DNSdist's DoH implementation using the nghttp2 provider. This vulnerability allows denial of service via a specially crafted DoH exchange that triggers a double-free memory error. Mitigation Mitigation for this issue is either not available or the currently available options d...

CVE-2025-22235

A flaw was found in the Spring Boot configuration. This vulnerability allows unauthorised access to the /null/ path via misconfigured security matchers when referencing disabled or non-exposed Spring Boot actuator endpoints. Mitigation Mitigation for this issue is either not available or the...

CVE-2025-46330

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SFCONMAXRETRY requests were sent. This issue has...