CVE-2025-41423

Mattermost CVE-2025-41423 affects Mattermost versions 10.4.x up to 10.4.2, 10.5.x up to 10.5.0, and 9.11.x up to 9.11.10. The issue is improper permission validation on the API endpoint /plugins/playbooks/api/v0/signal/keywords/ignore-thread, which could allow any user or attacker to delete posts...

CVE-2025-27581

creationtimestamp| type| source ---|---|--- 2025-04-24 00:05:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13164 2025-04-24 01:14:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjst5wtw2s 2025-04-24 04:42:07+00:00| seen|...

CVE-2025-44135

The code-projects Online Class and Exam Scheduling System version 1.0 is vulnerable to an SQL injection attack in the /Scheduling/pages/profile_update.php endpoint. The root cause is the lack of validation for the username parameter against externally entered SQL statements. An attacker can explo...

CVE-2025-46400

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via readarcobject function...

CVE-2022-23143

creationtimestamp| type| source ---|---|--- 2025-04-23 21:05:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13157...

CVE-2025-46397

creationtimestamp| type| source ---|---|--- 2025-04-23 21:05:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13154 2025-04-24 00:02:03+00:00| published-proof-of-concept| Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0 2025-04-24 00:31:13+00:00| seen| https://t.me/cvedetector/23620...

CVE-2025-46400

creationtimestamp| type| source ---|---|--- 2025-04-23 21:04:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13151 2025-04-24 00:02:03+00:00| published-proof-of-concept| Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0 2025-04-24 00:31:12+00:00| seen| https://t.me/cvedetector/23618...

CVE-2025-45427

creationtimestamp| type| source ---|---|--- 2025-04-23 17:19:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnipapo3j32t 2025-04-23 17:48:49+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114388535130823992 2025-04-23 18:39:46+00:00| seen|...

CVE-2025-2760

GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2025-1054

creationtimestamp| type| source ---|---|--- 2025-04-23 10:10:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13017 2025-04-23 13:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnibm3l7xc2r 2025-04-23 14:28:59+00:00| seen| https://t.me/cvedetector/23588...

CVE-2025-3530

creationtimestamp| type| source ---|---|--- 2025-04-23 09:20:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnhuhj2qcb2r 2025-04-23 12:48:32+00:00| seen| https://t.me/cvedetector/23581...

CVE-2025-0926

CVE-2025-0926 affects AXIS Camera Station Pro. A non-admin user can remove system files, causing a boot loop by redirecting a file deletion during video recording. The issue is tied to Axis products and is mitigated by a patched Axis advisory; Axis has released a fixed version. Exploitation detai...

CVE-2025-46394

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences...

CVE-2025-28019

The TOTOLINK A800R wireless router (version V4.1.2cu.5137_B20200730 ) contains a buffer overflow vulnerability in the downloadFile.cgi component. The root cause is the copying of buffers without validating the size of the input data. Remote attackers can exploit this issue to execute arbitrary co...

CVE-2025-31328

creationtimestamp| type| source ---|---|--- 2025-04-22 21:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngln3ulrl2c 2025-04-22 22:35:16+00:00| seen| https://t.me/cvedetector/23541...

CVE-2025-37087

A vulnerability exists in the cmdb service of the HPE Performance Cluster Manager (HPCM) , specifically affecting versions 1.12 and earlier . Due to a missing authorization issue (CWE-862 ), an attacker could gain unauthorized access to an arbitrary file on the server host. The potential security...

CVE-2025-28038

creationtimestamp| type| source ---|---|--- 2025-04-22 20:19:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngitkis2s2c 2025-04-22 21:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114383815046638917...

CVE-2012-12332

creationtimestamp| type| source ---|---|--- 2025-04-22 19:58:28+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lnghoau5b222...

CVE-2025-3767

creationtimestamp| type| source ---|---|--- 2025-04-22 19:09:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngewdoelk2v 2025-04-22 20:54:50+00:00| seen| https://t.me/cvedetector/23533...

CVE-2025-1950 IBM Hardware Management Console - Power Systems command execution

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source...