CVE-2025-2525 Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Upload

The Streamit theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'stAuthenticationController::editprofile' function in all versions up to, and including, 4.0.1. This makes it possible for authenticated attackers, with subscriber-level and above...

CVE-2025-3385 LinZhaoguan pb-cms Classification Management Page cross site scripting

A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Classification Management Page. The manipulation of the argument Classification name leads to cross site scripting. The attack can ...

CVE-2025-29482

creationtimestamp| type| source ---|---|--- 2025-04-07 19:45:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10766 2025-04-07 22:55:51+00:00| seen| https://t.me/cvedetector/22349 2025-05-02 21:10:10+00:00| seen|...

CVE-2025-21436

creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:08+00:00| seen| Telegram/kIPmulmvyHHjtgmA-h6LkG8Qr-d4gjpjh169EvqvyP4-4Q 2025-04-07 14:45:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10705 2025-04-07 15:07:11+00:00| seen|...

CVE-2025-21438

creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:07+00:00| seen| Telegram/PxgItuH1qTSdpVIqjljQp70ezMBrxj3Wpd4MMoc5smzp-38 2025-04-07 15:07:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmaafib4mn2i 2025-04-07 15:23:37+00:00| seen| https://t.me/cvedetector/22289...

CVE-2025-21447

creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:04+00:00| seen| Telegram/R-J8sEsneLHqCtonuibfqBbpXvG6b-lMTEqEBhPDCElHkt8 2025-04-07 13:36:06+00:00| seen| Telegram/xWd3aJgkYYElk-g7m1QlDLR4EuR7sDHiszgq2ISUrjEYOkY 2025-04-07 15:07:12+00:00| seen|...

CVE-2025-21448

creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:03+00:00| seen| Telegram/bp4bbCi8bjAYpmQNnqIGw6RSPsRnNDUuSSS3lVsh153hsQ 2025-04-07 15:07:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmaafiianm2i 2025-04-07 15:23:32+00:00| seen| https://t.me/cvedetector/22286...

CVE-2025-21439

Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer...

CVE-2025-21434

Transient DOS may occur while parsing EHT operation IE or EHT capability IE...

CVE-2024-43066

Memory corruption while handling file descriptor during listener registration/de-registration...

CVE-2025-21430

CVE-2025-21430 is a Qualcomm WLAN (WLAN Host) vulnerability described as a transient Denial of Service during STA-to-AP connection and ADD TS request to establish a TSpec session. The CVSS 3.1 base score is 7.5 (Network, Low attack complexity, No privileges, No user interaction, Availability impa...

CVE-2024-45549

CVE-2024-45549 is a Qualcomm-related vulnerability described as information disclosure occurring when creating MQ channels. The entry is classified as High severity (CVSS 3.1 base 7.7: Local attack, no privileges required, low attack complexity, confidentiality impact High). It is associated with...

CVE-2025-3346

A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptpserverstartip/pptpserverendip leads to buffer overflow. The attack may be launched...

CVE-2025-3343

creationtimestamp| type| source ---|---|--- 2025-04-07 08:44:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10690 2025-04-07 10:30:46+00:00| published-proof-of-concept| Telegram/dllxRLzzkJ4-24bSKRjV7sOKfEIbZP3rJRaVDzV1mqHhitY 2025-04-07 11:07:57+00:00| seen|...

CVE-2025-3344

creationtimestamp| type| source ---|---|--- 2025-04-07 08:44:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10688 2025-04-07 11:07:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm7szq6u5f2b 2025-04-07 11:30:41+00:00| published-proof-of-concept|...

CVE-2025-3341

creationtimestamp| type| source ---|---|--- 2025-04-07 07:46:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10680 2025-04-07 09:31:09+00:00| published-proof-of-concept| Telegram/ZqVcp9kxvRu5E7Cj8nsMX7B3XhX8B8CAXf42e1JkncWKY5I 2025-04-07 11:07:53+00:00| seen|...

CVE-2025-3338

creationtimestamp| type| source ---|---|--- 2025-04-07 05:45:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10675 2025-04-07 07:17:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm7g64g54c2f 2025-04-07 08:30:27+00:00| published-proof-of-concept|...

CVE-2025-20660

creationtimestamp| type| source ---|---|--- 2025-04-07 03:44:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10670 2025-04-07 07:17:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm7g63ijnb26...

CVE-2024-58116

The CVE-2024-58116 entry concerns a buffer overflow in the SVG parsing module of the ArkUI framework. The vulnerability affects ArkUI’s SVG parsing component, with the primary impact stated as availability disruption. According to public records, the CVSS v3.1 metrics indicate a high base score (...

CVE-2024-58113

Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability...