CVE-2025-3760

CVE-2025-3760 is a stored XSS vulnerability in Liferay Portal (radio button type custom fields) affecting Portal 7.2.0–7.4.3.129 and Liferay DXP 2024.Q1–Q4, 2023 Q3–Q4, and related GA/update branches. The underlying issue is injection of malicious JavaScript into a page by remote authenticated at...

CVE-2025-99999

creationtimestamp| type| source ---|---|--- 2025-04-17 11:16:44+00:00| seen| https://bsky.app/profile/masuda-bot.jiskey.dev.ap.brid.gy/post/3lmyy6gkrnej2 2026-05-21 11:00:14+00:00| seen| Telegram/srrws2Goqnzo18NHrsMZQVnJlAuG4EubtN588eV7RqbvrI...

CVE-2025-29931

CVE-2025-29931 affects Siemens TeleControl Server Basic versions prior to 3.1.2.2. The issue arises from insufficient validation of a length field in a serialized message, used to size memory for deserialization, which could allow an unauthenticated remote attacker to force excessive memory alloc...

This ‘College Protester’ Isn’t Real. It’s an AI-Powered Undercover Bot for Cops

Massive Blue is helping cops deploy AI-powered social media bots to talk to people they suspect are anything from violent sex criminals all the way to vaguely defined “protesters.”...

CVE-2025-22096

In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: Fix error code msmparsedeps The SUBMITERROR macro turns the error code negative. This extra '-' operation turns it back to positive EINVAL again. The error code is passed to ERRPTR and since positive values are not a...

CVE-2025-22095

In the Linux kernel, the following vulnerability has been resolved: PCI: brcmstb: Fix error path after a call to regulatorbulkget If the regulatorbulkget returns an error and no regulators are created, we need to set their number to zero. If we don't do this and the PCIe link up fails, a call to...

CVE-2025-22073

In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufsnewfile failure It's called from spufsfilldir, and caller of that will do spufsrmdir in case of failure. That does remove everything we'd managed to create, but... the problem dentry is still negative...

CVE-2025-22049

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Increase ARCHDMAMINALIGN up to 16 ARCHDMAMINALIGN is 1 by default, but some LoongArch-specific devices such as APBDMA require 16 bytes alignment. When the data buffer length is too small, the hardware may make an error...

CVE-2025-1532 Code Injection Vulnerability in Phoneservice

Phoneservice module is affected by code injection vulnerability, successful exploitation of this vulnerability may affect service confidentiality and integrity...

CVE-2025-22125

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that raid write performance is quite bad because all IO are throttled by wbt of underlying disks, due to flag REQIDLE is ignored. And turns out...

WordPress Ivy School Theme <= 1.6.0 is vulnerable to Local File Inclusion

Software Ivy School Type Theme Vulnerable versions = 1.6.0 Fixed in 1.6.1 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-39470 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 2982cc652634 Credits Bonds Required privilege Unauthenticated...

CVE-2025-29449

CVE-2025-29449 affects Twonav version 2.1.18-20241105. The vulnerability stems from mishandling of the link identification function, enabling a remote attacker to obtain sensitive information. Connected sources consistently reference the same affected version and impact; no concrete remediation v...

CVE-2025-29449

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function...

CVE-2025-32415

CVE-2025-32415 affects libxml2: vulnerable in versions prior to 2.13.8 and 2.14.x prior to 2.14.2. The root cause is a heap-based buffer under-read in xmlSchemaIDCFillNodeTables (xmlschemas.c) that can be triggered by validating a crafted XML against a specific identity-constrained XML schema or ...

CVE-2025-31021

creationtimestamp| type| source ---|---|--- 2025-04-16 23:24:10+00:00| seen| https://bsky.app/profile/infosecsherpa.bsky.social/post/3lmxqekakxc2e...

CVE-2025-1566

DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions...

CVE-2025-0757

creationtimestamp| type| source ---|---|--- 2025-04-16 22:57:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12165 2025-04-17 02:06:37+00:00| seen| https://t.me/cvedetector/23200 2025-04-17 02:48:30+00:00| seen|...

CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

CVE-2025-69420

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:51+00:00| seen| https://bsky.app/profile/connrar.bsky.social/post/3lmxar4szg22s 2026-01-27 21:03:11+00:00| seen| https://bsky.app/profile/teenigma.bsky.social/post/3mdgntmyjsc2b 2026-01-28 02:01:25+00:00| seen|...

CVE-2025-32863

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxaptlex62h 2025-04-16 20:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605818472586 2025-04-16 21:55:09+00:00| seen|...