CVE-2025-20658

The DA component in MediaTek's microprogramming software is vulnerable to a permission bypass caused by a logic error involving an out-of-bounds write in memory. An attacker with physical access to the device can exploit this flaw to achieve local escalation of privilege without requiring additio...

CVE-2025-28406

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the jobLogId parameter...

CVE-2025-3324

creationtimestamp| type| source ---|---|--- 2025-04-06 22:44:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10644 2025-04-07 02:50:32+00:00| seen| https://t.me/cvedetector/22232 2025-04-07 03:07:27+00:00| seen|...

CVE-2025-3309

creationtimestamp| type| source ---|---|--- 2025-04-06 06:38:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10630 2025-04-06 08:00:33+00:00| published-proof-of-concept| Telegram/IbA9X09J1CppMWO1fGsDOe1by6gSQipns8xXYjrvhxBpw 2025-04-06 09:12:37+00:00| seen|...

CVE-2025-3306

The CVE-2025-3306 entry concerns code-projects Blood Bank Management System 1.0. Affected component/file: /don.php; root cause: manipulation of the argument fullname leads to SQL injection. This vulnerability can be exploited remotely and may affect other parameters. Multiple connected sources co...

CVE-2025-29476

Buffer Overflow vulnerability in compresschunkfuzzer with oss-fuzz on commit 16450518afddcb3139de627157208e49bfef6987 in c-blosc2 v.2.17.0 and before...

CVE-2025-32366

creationtimestamp| type| source ---|---|--- 2025-04-05 23:42:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10620 2025-04-06 01:07:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm4aykahu22i 2025-04-06 03:27:01+00:00| seen|...

CVE-2025-32365

creationtimestamp| type| source ---|---|--- 2025-04-05 22:37:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10617 2025-04-06 01:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm4ayjzb632h 2025-04-06 03:27:01+00:00| seen| https://t.me/cvedetector/22204...

CVE-2025-32360

creationtimestamp| type| source ---|---|--- 2025-04-05 21:37:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10611 2025-04-06 01:07:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm4aykmajh2u 2025-04-06 01:46:45+00:00| seen| https://t.me/cvedetector/22199...

CVE-2024-52322

creationtimestamp| type| source ---|---|--- 2025-04-05 16:39:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10605 2025-04-05 21:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm3tkyylmn2o 2025-04-05 21:36:05+00:00| seen| https://t.me/cvedetector/22195...

CVE-2025-3267

creationtimestamp| type| source ---|---|--- 2025-04-04 20:36:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10546 2025-04-04 21:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llzd3oengu2i 2025-04-05 00:42:49+00:00| seen|...

CVE-2025-32252

Missing Authorization vulnerability in Black and White WP Genealogy – Your Family History Website wpgenealogy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Genealogy – Your Family History Website: from n/a through = 0.1.9...

CVE-2025-32258

CVE-2025-32258 describes a missing authorization issue in the WordPress plugin Simple Website Logo . The vulnerability arises from incorrectly configured access control security levels, enabling exploitation of restricted operations by unauthorized actors. The description notes the affected range...

CVE-2025-32207 WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Stored XSS.This issue affects Ni WooCommerce Cost Of Goods: from n/a through = 3.2.8...

CVE-2025-32172 WordPress YaMaps for WordPress plugin <= 0.6.40 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yuri Baranov YaMaps for WordPress yamaps allows Stored XSS.This issue affects YaMaps for WordPress: from n/a through = 0.6.40...

CVE-2025-32146 WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in JoomSky JS Job Manager allows PHP Local File Inclusion. This issue affects JS Job Manager: from n/a through 2.0.2...

CVE-2025-31723

A cross-site request forgery CSRF vulnerability in Jenkins Simple Queue Plugin 1.4.6 and earlier allows attackers to change and reset the build queue order...

CVE-2025-0468

A security vulnerability exists in the Imagination GPU Driver (specifically identified in some records as Graphics Ddk ) where software running as a non-privileged user can perform improper GPU system calls. This allows an attacker to subvert the GPU hardware to write to arbitrary physical memory...

CVE-2025-22282

creationtimestamp| type| source ---|---|--- 2025-04-04 11:39:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10433 2025-04-04 13:07:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyici5yrh2b 2025-04-04 14:40:17+00:00| seen|...

CVE-2025-3241

creationtimestamp| type| source ---|---|--- 2025-04-04 11:39:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10432 2025-04-04 13:07:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyici2ofb2i 2025-04-04 14:40:15+00:00| seen|...