CVE-2025-32376

Discourse is an open-source discussion platform. Prior to versions 3.4.3 on the stable branch and 3.5.0.beta3 on the beta branch, the users limit for a DM can be bypassed, thus giving the ability to potentially create a DM with every user from a site in it. This issue has been patched in stable...

CVE-2025-4115

creationtimestamp| type| source ---|---|--- 2025-04-30 13:13:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14029 2025-04-30 13:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114427227091111449 2025-04-30 15:31:40+00:00| seen|...

CVE-2025-24338

creationtimestamp| type| source ---|---|--- 2025-04-30 11:13:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14005 2025-04-30 13:31:04+00:00| published-proof-of-concept| Telegram/ZMJS5w1XZ2iVn41-DRp0jBJzL5A1-4Dr49XSwoANaTKxMXI 2025-04-30 13:55:27+00:00| seen|...

CVE-2025-4016

A vulnerability classified as critical has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This affects the function deleteIndex of the file novel-admin/src/main/java/com/java2nb/common/controller/LogController.java. The manipulation leads to improper...

CVE-2025-4125

creationtimestamp| type| source ---|---|--- 2025-04-30 10:00:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnzjxxfrut2r 2025-04-30 12:03:33+00:00| seen| https://t.me/cvedetector/24074 2025-04-30 13:13:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14022...

CVE-2025-29906

Finit is a fast init for Linux systems. Versions starting from 3.0-rc1 and prior to version 4.11 bundle an implementation of getty for the tty configuration directive that can bypass /bin/login, i.e., a user can log in as any user without authentication. This issue has been patched in version 4.1...

CVE-2025-3910

creationtimestamp| type| source ---|---|--- 2025-04-29 21:13:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13924 2025-04-29 23:50:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw2uaqv2o 2025-04-30 01:11:55+00:00| seen| https://t.me/cvedetector/24057 2025-11-03...

CVE-2025-46348

YesWiki prior to 4.5.4 allows unauthenticated backups via the archives API, enabling archive creation and download with predictable filenames. This undermines authentication, exposes potentially sensitive site data, and can enable DoS by mass archive creation. The issue has been fixed in version ...

CVE-2025-4089

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox 138 and Thunderbird 138...

CVE-2025-46347

creationtimestamp| type| source ---|---|--- 2025-04-29 18:12:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13892 2025-04-29 19:50:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lny2ilg6ii22 2025-04-29 21:01:12+00:00| seen|...

CVE-2025-4074

creationtimestamp| type| source ---|---|--- 2025-04-29 18:12:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13889 2025-04-29 19:50:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lny2ilmsdj2h 2025-04-29 20:01:14+00:00| published-proof-of-concept|...

CVE-2025-46349

creationtimestamp| type| source ---|---|--- 2025-04-29 18:12:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13883 2025-04-29 19:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lny2il475r2n 2025-04-29 20:01:14+00:00| published-proof-of-concept|...

CVE-2025-4092

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of these could have been...

CVE-2025-23180

CWE-250: Execution with Unnecessary Privileges...

CVE-2025-0716

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and also negatively affect...

CVE-2025-4082

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges. This bug only affects...

CGA-MRFX-6P3F-9C8H

Bulletin has no description...

CVE-2025-46346

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, a stored cross-site scripting XSS vulnerability was discovered in the application’s comments feature. This issue allows a malicious actor to inject JavaScript payloads that are stored and later executed in the browser of any user...

CVE-2025-23179 Ribbon Communications - CWE-798: Use of Hard-coded Credentials

CWE-798: Use of Hard-coded Credentials...

CVE-2025-4085

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn32i2222s 2025-04-29 16:49:38+00:00| seen| https://t.me/cvedetector/23997 2026-04-13 17:55:16+00:00| seen| Telegram/Rk7hMmIKYATXlhQfFOdK5MJxTVeQfOKjkNlqS7PgiJwldc...