CVE-2025-2385

creationtimestamp| type| source ---|---|--- 2025-03-17 16:47:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7794 2025-03-17 19:08:39+00:00| seen| https://t.me/cvedetector/20489 2025-03-17 19:32:26+00:00| seen| Telegram/tqhjnqyG63AMavUfrYijdv7hHvwgO0fWOo-eg8WU7ZDp2c...

CVE-2025-2241

CVE-2025-2241 describes a vulnerability in Hive (MCE/ACM) where VCenter credentials are exposed in the ClusterProvision object after provisioning a vSphere cluster. Attackers with read access to ClusterProvision objects can extract credentials even without direct Kubernetes Secrets access, potent...

CVE-2025-1398

Mattermost Desktop App versions =5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control TCC via code injection...

CVE-2025-0596

CVE-2025-0596 is a stored Cross-site Scripting (XSS) vulnerability in Dassault Systèmes’ ENOVIA Collaborative Industry Innovator (Bookmark Editor) on Release 3DEXPERIENCE R2024x. The issue allows an attacker to inject and execute arbitrary script code in a user’s browser session. Affected compone...

CVE-2025-29786

creationtimestamp| type| source ---|---|--- 2025-03-17 13:47:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7769 2025-03-17 16:33:06+00:00| published-proof-of-concept| Telegram/k2hWLXjvKh8ojTF1EeSN0Mqc987DrfNzj7Aa-hbf1HoriQ 2025-03-17 17:28:14+00:00| seen|...

CVE-2021-32584

An improper access control CWE-284 vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI...

CVE-2025-2401

creationtimestamp| type| source ---|---|--- 2025-03-17 12:47:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7758 2025-03-17 12:54:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114177870665644076 2025-03-17 14:57:21+00:00| seen| https://t.me/cvedetector/20458 2025-03-17...

CVE-2025-2374

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument aid/adminname/mobilenumber/email leads to sql injection. The...

CVE-2024-12992

creationtimestamp| type| source ---|---|--- 2025-03-17 09:46:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7748 2025-03-17 13:17:00+00:00| seen| https://t.me/cvedetector/20450 2025-03-17 13:51:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lklcf3vf722n 2025-03-25...

CVE-2024-12971 QuickShell Authenticated Command Injection

Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6...

CVE-2025-2369

creationtimestamp| type| source ---|---|--- 2025-03-17 08:46:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7745 2025-03-17 09:46:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkkuolnn6s2j 2025-03-17 09:48:22+00:00| seen|...

CVE-2025-2362

creationtimestamp| type| source ---|---|--- 2025-03-17 07:00:17+00:00| published-proof-of-concept| Telegram/upxSCMtLYTBuypjid0Yf5VZRtVVreDt9cRbcMaGwiEpFoQ 2025-03-17 07:46:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkknxsqovh2h 2025-03-17 09:06:13+00:00| seen|...

CVE-2025-2362 PHPGurukul Pre-School Enrollment System contact-us.php sql injection

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-2361

creationtimestamp| type| source ---|---|--- 2025-03-17 04:46:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7734 2025-03-17 07:46:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkknxsjcgu2x 2025-03-17 09:06:13+00:00| seen|...

CVE-2025-2361

CVE-2025-2361 affects Mercurial SCM’s Web Interface (hgweb). A cross-site scripting vulnerability arises from improper sanitization of user-controlled input passed via the cmd parameter in the Web Interface, enabling remote exploitation. Affected is Mercurial 4.5.3/71.19.145.211 with hgweb; multi...

CVE-2025-26042

Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack...

CVE-2025-2344

creationtimestamp| type| source ---|---|--- 2025-03-16 18:46:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7719 2025-03-16 20:33:24+00:00| seen| https://t.me/cvedetector/20414 2025-03-16 21:35:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkjlu332f...

CVE-2025-2342

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-2340

creationtimestamp| type| source ---|---|--- 2025-03-16 13:49:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7710 2025-03-16 16:22:34+00:00| seen| https://t.me/cvedetector/20409 2025-03-16 17:30:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkj65mttn...

CVE-2025-2337

creationtimestamp| type| source ---|---|--- 2025-03-16 09:50:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7708 2025-03-16 11:26:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkijshklcg26 2025-03-16 11:30:14+00:00| published-proof-of-concept|...