CVE-2025-29088

A flaw was found in SQLite. This vulnerability allows an application-level denial of service via improper configuration of the lookaside memory allocator, which could lead to resource exhaustion or application crashes. Mitigation Mitigation for this issue is either not available or the currently...

CVE-2025-32517 WordPress MultiMailer plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SCAND MultiMailer scand-multi-mailer allows Reflected XSS.This issue affects MultiMailer: from n/a through = 1.0.3...

CVE-2025-31014

CVE-2025-31014 is a verified vulnerability in the WordPress plugin Material Dashboard (Material Dashboard) described as an Authenticated Local File Inclusion via an improper control of the filename in PHP include/require statements. Affected software ranges up to version 1.4.5. Wordfence and CVE ...

CVE-2025-29916

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Datasets declared in rules have an option to specify the hashsize to use. This size setting isn't properly limited, so the hash table allocation can be large. Untrusted rules can...

CVE-2025-32760

creationtimestamp| type| source ---|---|--- 2025-04-11 03:49:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11369 2025-04-11 05:43:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmjcrbo5ee2v...

CGA-885H-459Q-2969

Bulletin has no description...

CVE-2025-27201

Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vict...

CVE-2025-32807

creationtimestamp| type| source ---|---|--- 2025-04-10 23:49:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11359 2025-04-11 01:38:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmiv2tssnh2j 2025-04-11 03:54:09+00:00| seen|...

CVE-2025-23009

creationtimestamp| type| source ---|---|--- 2025-04-10 21:43:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmihwd22jh2b 2025-04-10 23:43:23+00:00| seen| https://t.me/cvedetector/22686 2025-04-11 08:40:41+00:00| seen|...

CVE-2025-32696

creationtimestamp| type| source ---|---|--- 2025-04-10 21:43:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmihwawl2r2z 2025-04-10 23:43:17+00:00| seen| https://t.me/cvedetector/22681 2025-04-13 15:06:08+00:00| seen|...

CVE-2025-32696 "reupload-own" restriction can be bypassed by reverting file

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/actions/RevertAction.Php, includes/api/ApiFileRevert.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1...

CVE-2025-27732

Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-27730

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2025-27491

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network...

CVE-2025-27473

Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...

CVE-2025-32383

creationtimestamp| type| source ---|---|--- 2025-04-10 15:32:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmhta4el5a2r 2025-04-10 17:52:04+00:00| seen| https://t.me/cvedetector/22654...

CVE-2025-22375

creationtimestamp| type| source ---|---|--- 2025-04-10 11:32:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmhfsmjqfo24 2025-04-10 11:49:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11225 2025-04-10 13:52:33+00:00| seen|...

CVE-2025-1073

Panasonic IR Control Hub IR Blaster versions 1.17 and earlier may allow an attacker with physical access to load unauthorized firmware onto the device...

CVE-2025-32240

Missing Authorization vulnerability in wpvsingh Site Notify site-notify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Notify: from n/a through = 1.0...

CVE-2025-32214 WordPress Hive Support plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hive Support Hive Support hive-support allows Stored XSS.This issue affects Hive Support: from n/a through = 1.2.11...