CVE-2025-25001

creationtimestamp| type| source ---|---|--- 2025-04-04 00:35:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10373 2025-04-04 03:47:34+00:00| seen| https://t.me/cvedetector/22053 2025-04-04 05:06:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llxnhemd5g2i 2025-04-08...

CVE-2025-29815 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2025-25001 Microsoft Edge for iOS Spoofing Vulnerability

...

CVE-2025-3186

creationtimestamp| type| source ---|---|--- 2025-04-03 23:37:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10364 2025-04-04 01:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llxacukmha2c 2025-04-04 03:47:39+00:00| seen|...

CVE-2025-29504

creationtimestamp| type| source ---|---|--- 2025-04-03 21:06:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llwsmeragb2r 2025-04-03 23:36:22+00:00| seen| https://t.me/cvedetector/22024 2025-04-04 15:36:51+00:00| published-proof-of-concept|...

CVE-2025-3178 projectworlds Online Doctor Appointment Booking System deleteappointment.php sql injection

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /doctor/deleteappointment.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

CVE-2025-3160

creationtimestamp| type| source ---|---|--- 2025-04-03 19:25:09+00:00| seen| https://t.me/cvedetector/22000...

CVE-2025-31483

Miniflux is a feed reader. Due to a weak Content Security Policy on the /proxy/ route, an attacker can bypass the CSP of the media proxy and execute cross-site scripting when opening external images in a new tab/window. To mitigate the vulnerability, the CSP for the media proxy has been changed...

CVE-2025-31730

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DigitalCourt Marketer Addons marketer-addons allows Stored XSS.This issue affects Marketer Addons: from n/a through = 1.0.1...

CVE-2025-32050

creationtimestamp| type| source ---|---|--- 2025-04-03 15:07:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llw6jx6sqa24 2025-04-03 17:44:31+00:00| seen| https://t.me/cvedetector/21978 2025-05-09 20:26:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15835 2026-06-30...

CVE-2025-31558

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Greg TailPress tailpress allows Retrieve Embedded Sensitive Data.This issue affects TailPress: from n/a through = 0.4.4...

CVE-2025-32053

A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer over-read...

CVE-2025-31903

CVE-2025-31903 affects the XV Random Quotes WordPress plugin (versions up to 1.37). The issue is a Reflected XSS caused by improper input neutralization during web page generation. Public details include CVSS 3.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) with base score 7.1 (HIGH). The Initial Descri...

CVE-2025-22001

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix integer overflow in qaicvalidatereq These are u64 variables that come from the user via qaicattachsliceboioctl. Use checkaddoverflow to ensure that the math doesn't have an integer wrapping bug...

CVE-2025-22002

creationtimestamp| type| source ---|---|--- 2025-04-03 08:03:51+00:00| seen| https://bsky.app/profile/potato.software/post/3llvguwq57s23 2025-04-03 11:03:20+00:00| seen| https://t.me/cvedetector/21961 2025-04-03 11:12:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvrfdx7av2f...

CVE-2025-22006

creationtimestamp| type| source ---|---|--- 2025-04-03 07:34:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10177 2025-04-03 11:03:07+00:00| seen| https://t.me/cvedetector/21952 2025-04-03 11:12:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvrfdtiwd2c...

CVE-2025-2874

creationtimestamp| type| source ---|---|--- 2025-04-03 07:34:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10174 2025-04-03 11:03:12+00:00| seen| https://t.me/cvedetector/21954 2025-04-03 11:12:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvrfdmhxf24...

CVE-2025-3144

creationtimestamp| type| source ---|---|--- 2025-04-03 06:34:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10168 2025-04-03 07:06:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvdotogbl2z 2025-04-03 09:22:45+00:00| seen|...

CVE-2025-3146

CVE-2025-3146 concerns the PHPGurukul Bus Pass Management System v1.0, where an SQL injection is triggered through the viewid parameter in /view-pass-detail.php. Multiple connected sources (CNVD/CNNVD/NVD/CVE records and CVE-list) confirm remote exploitability and public disclosure, giving attack...

[SECURITY] Fedora 40 Update: suricata-7.0.10-1.fc40

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...