CVE-2025-30196

CVE-2025-30196 concerns Jenkins AnchorChain Plugin 1.0. The vulnerability arises because the plugin does not restrict URL schemes in links created from workspace content, allowing the javascript: scheme and enabling stored XSS when an attacker can control the input file for the Anchor Chain post-...

CVE-2024-45644

creationtimestamp| type| source ---|---|--- 2025-03-19 14:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwtcfvj2l 2025-03-19 14:38:46+00:00| seen| https://t.me/cvedetector/20635...

CVE-2024-10442

CVE-2024-10442 affects Synology Replication Service and Synology Unified Controller (DSMUC). The vulnerability is an off-by-one error in the transmission component that can allow remote attackers to execute arbitrary code. Affected versions include Replication Service before 1.0.12-0066, 1.2.2-03...

CVE-2024-57151

creationtimestamp| type| source ---|---|--- 2025-03-18 20:48:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7994 2025-03-19 00:18:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkovvir5uy2m 2025-03-19 00:26:15+00:00| seen|...

CVE-2025-25042

creationtimestamp| type| source ---|---|--- 2025-03-18 19:48:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7980 2025-03-18 20:18:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihzz5jf26 2025-03-18 21:55:41+00:00| seen| https://t.me/cvedetector/20606...

CVE-2023-22514

This High severity RCE Remote Code Execution vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.8, and a CVSS Vector of: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H which allows an...

CVE-2025-25595

creationtimestamp| type| source ---|---|--- 2025-03-18 16:51:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7924 2025-03-18 20:15:02+00:00| seen| https://t.me/cvedetector/20591 2025-03-18 20:18:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihybkf...

CVE-2025-30115

creationtimestamp| type| source ---|---|--- 2025-03-18 14:50:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7917 2025-03-18 17:44:17+00:00| seen| https://t.me/cvedetector/20581 2025-03-18 18:13:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkobidgw6...

CVE-2025-30116

creationtimestamp| type| source ---|---|--- 2025-03-18 14:50:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7913 2025-03-18 17:44:18+00:00| seen| https://t.me/cvedetector/20582 2025-03-18 18:13:29+00:00| seen|...

CVE-2025-2339

A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public an...

CVE-2025-2494

creationtimestamp| type| source ---|---|--- 2025-03-18 11:55:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7901 2025-03-18 13:01:22+00:00| seen| Telegram/6cbUuW0XOy9-5cfzVYZy-1D70VP0VBBmnHLM6kTk1XKO28 2025-03-18 16:03:50+00:00| seen| https://t.me/cvedetector/20565 2025-03-18 16:13:23+00:0...

CVE-2025-0755

The various bsonappend functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size INT32MAX, resulting in a segmentation fault and possible application crash. This...

CVE-2025-25590

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml...

CVE-2025-25580

CVE-2025-25580 affects yimioa prior to v2024.07.04 and is a SQL injection vulnerability exposed via the listNameBySql() method in the /xml/UserMapper.xml. The entry indicates a local-privilege context with user interaction required and high confidentiality impact, but no exploit details or public...

CVE-2025-26125

creationtimestamp| type| source ---|---|--- 2025-03-17 21:39:41+00:00| seen| https://t.me/cvedetector/20511 2025-03-17 22:01:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkm5q7svb426 2025-05-12 06:38:07+00:00| published-proof-of-concept|...

CVE-2025-25914

SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter...

CVE-2024-54525

creationtimestamp| type| source ---|---|--- 2025-03-17 19:47:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7835 2025-03-17 23:20:06+00:00| seen| https://t.me/cvedetector/20527 2025-03-18 00:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkmegyejtv2e 2025-03-23...

CVE-2025-24185

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. Parsing a maliciously crafted file may lead to an unexpected app termination...

CVE-2025-2388

creationtimestamp| type| source ---|---|--- 2025-03-17 19:32:25+00:00| seen| Telegram/r8ruSAfyv0cYfCWQL2RY3M8WbLJE6isd6j6oFDTTV3tTy4 2025-03-17 19:34:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7829 2025-03-17 21:39:40+00:00| seen| https://t.me/cvedetector/20510...

MAL-2025-2449 Malicious code in real-world1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c283f503b8625f549d7d7eae7699333b3d1ecf140d4aded77c129247c0ba1217 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...