CVE-2025-25293

creationtimestamp| type| source ---|---|--- 2025-03-12 20:42:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7368 2025-03-13 00:34:10+00:00| seen| https://t.me/cvedetector/20177 2025-03-14 22:06:13+00:00| seen|...

CVE-2025-27407

graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in GraphQL::Schema.fromintrospection or GraphQL::Schema::Loader.load can result in remote code...

CVE-2024-30620

creationtimestamp| type| source ---|---|--- 2025-03-12 17:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk74tl7rti2v 2025-03-12 17:41:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7355 2025-03-25 14:24:13+00:00| published-proof-of-concept|...

CVE-2025-2715

creationtimestamp| type| source ---|---|--- 2025-03-12 13:43:42+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lk6pmd3g2s2y 2025-03-24 23:23:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8568 2025-03-25 02:46:15+00:00| seen|...

Explaining External Network Assessment with Vector Command

Learn how external network assessment works within Vector Command, Rapid7’s continuous red team managed service. Understanding threat exposure management Let’s start by providing some context around where Vector Command fits into a security program and more specifically Continuous Threat Exposure...

CVE-2025-21857

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference tcfextsmisscookiebasealloc calls xaalloccyclic which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to...

CVE-2025-21846

In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when...

CVE-2024-58089

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double accounting race when btrfsrundelallocrange failed BUG When running btrfs with block size 4K smaller than page size 64K, aarch64, there is a very high chance to crash the kernel at generic/750, with the following...

CVE-2025-24912

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail...

CVE-2025-2231

creationtimestamp| type| source ---|---|--- 2025-03-12 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-129/ 2025-03-24 20:23:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8525 2025-03-24 22:35:04+00:00| seen| https://t.me/cvedetector/20992...

CVE-2025-2216

CVE-2025-2216 affects zzskzy Warehouse Refinement Management System 1.3. The vulnerable component is the UploadCrash function at /crash/log/SaveCrash.ashx, where manipulating the file parameter allows unrestricted remote upload. The vulnerability is described as critical and is publicly disclosed...

Microsoft Windows Multiple Vulnerabilities (KB5053594)

This host is missing an important security update according to Microsoft KB5053594 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-5359

creationtimestamp| type| source ---|---|--- 2025-03-11 22:00:06+00:00| seen| Telegram/fSuv2KpyfIksaa8qqgqv5fCpt00UzRfooou1l9gqHjc-A0g 2025-03-13 21:02:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lkbyl6ry552b 2025-11-08 03:00:05+00:00| published-proof-of-concept|...

CVE-2025-24201

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4...

CVE-2024-51319

creationtimestamp| type| source ---|---|--- 2025-03-11 17:37:47+00:00| seen| https://t.me/cvedetector/20099 2025-03-11 18:06:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4nsquby32h 2025-03-21 21:22:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8...

CVE-2024-51322

creationtimestamp| type| source ---|---|--- 2025-03-11 17:37:40+00:00| seen| https://t.me/cvedetector/20095 2025-03-11 18:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4nsskvnd2j 2025-03-11 20:21:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7...

CVE-2025-24988

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

CVE-2025-24985

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally...

CVE-2024-9157

UNSUPPORTED WHEN ASSIGNED A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out of an abundance of caution, this CVE ID is being assigned to better serve our customers and...

CVE-2025-0149 Zoom Apps - Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access...