CVE-2025-31802 WordPress Shiptimize for WooCommerce plugin <= 3.1.86 - Settings Change vulnerability

Missing Authorization vulnerability in Shiptimize Shiptimize for WooCommerce shiptimize-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shiptimize for WooCommerce: from n/a through = 3.1.86...

CVE-2025-31778 WordPress Donate Me Plugin <= 1.2.5 - Stored Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in raphaelheide Donate Me donate-me allows Reflected XSS.This issue affects Donate Me: from n/a through = 1.2.5...

CVE-2025-21893

In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in keyput Once a key's reference count has been reduced to 0, the garbage collector thread may destroy it at any time and so keyput is not allowed to touch the key after that point. The most keyput is normally allow...

CVE-2025-24208

creationtimestamp| type| source ---|---|--- 2025-04-01 03:21:46+00:00| seen| https://t.me/itsecnews/5669 2025-04-01 12:49:35+00:00| seen| https://poliverso.org/objects/0477a01e-88018e08-9f90bafadba6dbf1 2025-04-01 12:49:35+00:00| seen| https://poliverso.org/objects/0477a01e-88018e08-9f90bafadba6d...

CVE-2025-27829

A security vulnerability was identified in Stormshield Network Security (SNS) 4.3.x versions prior to 4.3.35 . The flaw occurs when multicast streams are enabled on different interfaces, which can lead to the interruption of multicast traffic on certain interfaces. This issue may result in a deni...

CVE-2025-3085

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...

Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2025-1325)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-30427

creationtimestamp| type| source ---|---|--- 2025-03-31 23:31:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9793 2025-04-01 05:48:16+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114261130959029617 2025-04-01 05:48:16+00:00| seen|...

CVE-2025-3041 Project Worlds Online Time Table Generator updatestudent.php unrestricted upload

A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploi...

CVE-2025-31188

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to bypass Privacy preferences...

CVE-2025-30441

This issue was addressed through improved state management. This issue is fixed in Xcode 16.3. An app may be able to overwrite arbitrary files...

CVE-2025-24283

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data...

CVE-2025-24170

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges...

CVE-2025-24254

This vulnerability in macOS (specifically versions Ventura 13.7.5 , Sonoma 14.7.5 , and Sequoia 15.4 ) is caused by insufficient validation of symlinks . A local user may exploit this flaw to elevate privileges . Remediation is available through the official Apple security updates for the affecte...

CVE-2025-24278

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data...

CVE-2025-31191

This vulnerability exists in the Core Services framework on macOS, iOS, iPadOS, and tvOS . It stems from insufficient protection of service data within the GrantAccessToMultipleFiles interface, allowing an attacker to bypass App Sandbox protection mechanisms. Exploitation could enable unauthorize...

CVE-2025-24272

This vulnerability allows an app to potentially modify protected parts of the file system due to an improper access control issue. The flaw was addressed by Apple through improved checks in the following versions: macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura 13.7.5 . No specific e...

CVE-2025-24178

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24178

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24241

A configuration issue in macOS allows an application to trick a user into copying sensitive data to the pasteboard . This vulnerability affects macOS Ventura 13.7.5 , macOS Sonoma 14.7.5 , and macOS Sequoia 15.4 , where the issue has been addressed with additional restrictions. No specific exploi...