CVE-2025-29449: Server-Side Request Forgery (SSRF)

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function...

CVE-2025-29449

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function...

CVE-2025-31021

creationtimestamp| type| source ---|---|--- 2025-04-16 23:24:10+00:00| seen| https://bsky.app/profile/infosecsherpa.bsky.social/post/3lmxqekakxc2e...

CVE-2025-1566

DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions...

CVE-2025-0757

creationtimestamp| type| source ---|---|--- 2025-04-16 22:57:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12165 2025-04-17 02:06:37+00:00| seen| https://t.me/cvedetector/23200 2025-04-17 02:48:30+00:00| seen|...

CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

CVE-2025-69420

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:51+00:00| seen| https://bsky.app/profile/connrar.bsky.social/post/3lmxar4szg22s 2026-01-27 21:03:11+00:00| seen| https://bsky.app/profile/teenigma.bsky.social/post/3mdgntmyjsc2b 2026-01-28 02:01:25+00:00| seen|...

CVE-2025-32863

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxaptlex62h 2025-04-16 20:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605818472586 2025-04-16 21:55:09+00:00| seen|...

CVE-2025-32867

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'CreateBackup' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

CVE-2025-32848

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockSmtpSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from an...

CVE-2025-2291

Password can be used past expiry in PgBouncer due to authquery not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password...

CVE-2025-32850

Siemens TeleControl Server Basic is affected by a SQL injection in the internal LockTcmSettings method prior to version 3.1.2.2. The vulnerability can allow an authenticated remote attacker to bypass authorization, read/write the application database, and execute code with NT AUTHORITY\NetworkSer...

CVE-2025-32824

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

CVE-2025-32475

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

CVE-2025-22096

In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: Fix error code msmparsedeps The SUBMITERROR macro turns the error code negative. This extra '-' operation turns it back to positive EINVAL again. The error code is passed to ERRPTR and since positive values are not a...

CVE-2025-22074

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix rcount dec/increment mismatch rcount is only increased when there is an oplock break wait, so rcount inc/decrement are not paired. This can cause rcount to become negative, which can lead to a problem where the ksmbd...

CVE-2025-22071

In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufscreatecontext Leak fixes back in 2008 missed one case - if we are trying to set affinity and spufsmkdir fails, we need to drop the reference to neighbor...

CVE-2025-22064

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't unregister hook when table is dormant When nftablesupdchain encounters an error, hook registration needs to be rolled back. This should only be done if the hook has been registered, which won't happen...

CVE-2025-22094

In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Fix ref-counting on the PMU 'vpapmu' Commit 176cda0619b6 "powerpc/perf: Add perf interface to expose vpa counters" introduced 'vpapmu' to expose Book3s-HV nested APIv2 provided L1L2 context switch latency counters t...