9517 matches found
CVE-2024-54092
creationtimestamp| type| source ---|---|--- 2025-04-08 09:40:27+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmc6mbtvbv2e 2025-04-08 11:48:22+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114302183113806542 2025-04-08 12:07:15+00:00| seen|...
CVE-2025-22015
In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or in swap cache, but not at the same time. Namely, once it is in swap cache, folio-mapping should be NULL, and the folio is no longer...
CVE-2024-41788
creationtimestamp| type| source ---|---|--- 2025-04-08 08:46:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10889 2025-04-08 09:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmc6m5lfpw2w 2025-04-08 11:48:18+00:00| seen|...
CVE-2025-27435
creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10867 2025-04-08 09:18:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5ecpojo2z 2025-04-08 11:29:19+00:00| seen| https://t.me/cvedetector/22429...
CVE-2025-27437
creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10866 2025-04-08 09:18:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5edx3km2i 2025-04-08 11:29:14+00:00| seen| https://t.me/cvedetector/22426...
CVE-2025-31333
creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10857 2025-04-08 09:18:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5eczqwo2u 2025-04-08 11:29:00+00:00| seen| https://t.me/cvedetector/22415...
CVE-2025-26654 Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud)
SAP Commerce Cloud Public Cloud does not allow to disable unencrypted HTTP port 80 entirely, but instead allows a redirect from port 80 to 443 HTTPS. As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request befor...
CVE-2025-29478
A flaw was found in Fluent Bit's YAML configuration parser. This vulnerability allows attackers to cause a heap use-after-free, potentially leading to denial of service via a crafted YAML input file. Mitigation Mitigation for this issue is either not available or the currently available options d...
CVE-2024-47261
51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device...
CVE-2025-20946
Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without user interaction...
CVE-2025-20945
Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch...
CVE-2025-3403
creationtimestamp| type| source ---|---|--- 2025-04-08 03:45:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10826 2025-04-08 05:17:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmbpwoibbn2i 2025-04-08 08:08:09+00:00| seen|...
CVE-2025-2525 Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
The Streamit theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'stAuthenticationController::editprofile' function in all versions up to, and including, 4.0.1. This makes it possible for authenticated attackers, with subscriber-level and above...
CVE-2025-3385 LinZhaoguan pb-cms Classification Management Page cross site scripting
A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Classification Management Page. The manipulation of the argument Classification name leads to cross site scripting. The attack can ...
CVE-2025-29482
creationtimestamp| type| source ---|---|--- 2025-04-07 19:45:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10766 2025-04-07 22:55:51+00:00| seen| https://t.me/cvedetector/22349 2025-05-02 21:10:10+00:00| seen|...
CVE-2025-21436
creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:08+00:00| seen| Telegram/kIPmulmvyHHjtgmA-h6LkG8Qr-d4gjpjh169EvqvyP4-4Q 2025-04-07 14:45:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10705 2025-04-07 15:07:11+00:00| seen|...
CVE-2025-21438
creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:07+00:00| seen| Telegram/PxgItuH1qTSdpVIqjljQp70ezMBrxj3Wpd4MMoc5smzp-38 2025-04-07 15:07:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmaafib4mn2i 2025-04-07 15:23:37+00:00| seen| https://t.me/cvedetector/22289...
CVE-2025-21447
creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:04+00:00| seen| Telegram/R-J8sEsneLHqCtonuibfqBbpXvG6b-lMTEqEBhPDCElHkt8 2025-04-07 13:36:06+00:00| seen| Telegram/xWd3aJgkYYElk-g7m1QlDLR4EuR7sDHiszgq2ISUrjEYOkY 2025-04-07 15:07:12+00:00| seen|...
CVE-2025-21448
creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:03+00:00| seen| Telegram/bp4bbCi8bjAYpmQNnqIGw6RSPsRnNDUuSSS3lVsh153hsQ 2025-04-07 15:07:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmaafiianm2i 2025-04-07 15:23:32+00:00| seen| https://t.me/cvedetector/22286...