CVE-2025-29030

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function...

CVE-2025-2304

creationtimestamp| type| source ---|---|--- 2025-03-14 13:40:23+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdqechp2b2a 2025-03-14 13:47:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7546 2025-03-14 15:02:35+00:00| seen|...

CVE-2025-21199

Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-21247

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...

Live Ransomware Demo: See How Hackers Breach Networks and Demand a Ransom

Cyber threats evolve daily. In this live webinar, learn exactly how ransomware attacks unfold—from the initial breach to the moment hackers demand payment. Join Joseph Carson, Delinea's Chief Security Scientist and Advisory CISO, who brings 25 years of enterprise security expertise. Through a liv...

CVE-2025-26163

creationtimestamp| type| source ---|---|--- 2025-03-14 05:50:16+00:00| seen| https://t.me/cvedetector/20262 2025-03-14 06:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkcyxin7ek2n...

Ubuntu: Security Advisory (USN-7328-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-1217

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME...

Element Android 安全漏洞

Element Android is an Android Matrix client for the open source Element. A security vulnerability exists in Element Android version 1.6.32 and earlier, which stems from a failure to logout a user when entering an incorrect PIN more than a configured number of times, which could lead to an attacke...

CVE-2025-26706

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.07...

CVE-2025-28923

Cross-Site Request Forgery CSRF vulnerability in philippe No Disposable Email no-disposable-email allows Stored XSS.This issue affects No Disposable Email: from n/a through = 2.5.1...

CVE-2025-1651

creationtimestamp| type| source ---|---|--- 2025-03-13 19:48:26+00:00| seen| https://t.me/cvedetector/20245 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-157/ 2025-04-24 21:07:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13342...

CVE-2025-24035

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2025-2229

CVE-2025-2229 affects Philips IntelliSpace Cardiovascular (ISCV) software. A token is created using the username, current date/time, and a fixed AES-128 encryption key that is identical across all installations, enabling token duplication across environments. Reported across Philips ISCV products...

CVE-2024-30143

creationtimestamp| type| source ---|---|--- 2025-03-13 17:44:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7442 2025-03-13 21:28:49+00:00| seen| https://t.me/cvedetector/20256 2025-03-13 22:36:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkc5tfijyn2w...

CVE-2025-22213

Inadequate checks in the Media Manager allowed users with "edit" privileges to change file extension to arbitrary extension, including .php and other potentially executable extensions...

CVE-2024-54085

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2025-29997

This vulnerability exists in the CAP back office application due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API request URL to gain unauthorized access to other user accounts...

CVE-2024-41055

creationtimestamp| type| source ---|---|--- 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-03 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

Creating Scripts to Identify Vulnerable SMTP Servers

This whitepaper covers how to create Nmap scripts to identify banners and versions of SMTP servers. It also covers methods to mitigate the public visibility of banners and version information on SMTP servers. Written in Portuguese...