CVE-2025-2095

creationtimestamp| type| source ---|---|--- 2025-03-07 22:35:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6897 2025-03-08 00:58:40+00:00| seen| https://t.me/cvedetector/19861 2025-03-08 02:19:46+00:00| seen|...

CVE-2025-27826

creationtimestamp| type| source ---|---|--- 2025-03-07 22:35:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6894 2025-03-08 00:58:46+00:00| seen| https://t.me/cvedetector/19865 2025-03-08 02:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljthjrao4226 2025-08-16...

CVE-2025-27825

creationtimestamp| type| source ---|---|--- 2025-03-07 22:35:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6893 2025-03-08 00:58:43+00:00| seen| https://t.me/cvedetector/19864 2025-03-08 02:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljthjrmts62e...

CVE-2025-2024 Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visi...

Security Bulletin: IBM Engineering Requirements Management DOORS Next is vulnerable to Target Blank Vulnerability (CVE-2024-39727)

Summary IBM Engineering Requirements Management DOORS Next is vulnerable to Target Blank Vulnerability CVE-2024-39727. Vulnerability Details CVEID:CVE-2024-39727 DESCRIPTION: IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to...

CVE-2024-12975

The CVE-2024-12975 entry concerns a buffer overread in the Silicon Labs CPC application when operating in full duplex SPI after receiving an invalid SPI packet. The provided connected sources indicate the issue arises in the CPC/SiLabs stack and has a low CVSS base score (1.0, LOW) with physical ...

CVE-2024-53695

The CVE-2024-53695 entry concerns QNAP HBS 3 Hybrid Backup Sync. A buffer overflow (boundary error) in the product could, if exploited, allow a remote attacker to modify memory or crash processes. Public references in the provided documents confirm the vulnerability and indicate a fix in HBS 3 Hy...

CVE-2024-50405

CVE-2024-50405 affects QNAP QTS and QuTS hero with CRLF Injection due to improper neutralization of CRLF sequences. Affected products and versions: QTS 5.2.3.3006 build 20250108 and later; QuTS hero h5.2.3.3006 build 20250108 and later. Root cause is improper CRLF sequence handling, enabling a re...

CVE-2025-2087

creationtimestamp| type| source ---|---|--- 2025-03-07 14:38:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6835 2025-03-07 16:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljsfhm5jey2b 2025-03-07 16:37:08+00:00| seen|...

CVE-2024-12650

An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications...

CVE-2025-21838

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal devicedel can lead to new work being scheduled in gadget-work workqueue. This is observed, for example, with the dwc3 driver with the following call stack: devicedel...

CVE-2025-21843

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: avoid garbage value in panthorioctldevquery 'prioritiesinfo' is uninitialized, and the uninitialized value is copied to user object when calling PANTHORUOBJSET. Using memset to initialize 'prioritiesinfo' to avoid th...

CVE-2024-58085

In the Linux kernel, the following vulnerability has been resolved: tomoyo: don't emit warning in tomoyowritecontrol syzbot is reporting too large allocation warning at tomoyowritecontrol, for one can write a very very long line without new line character. To fix this warning, I use GFPNOWARN...

CVE-2024-57490

creationtimestamp| type| source ---|---|--- 2025-03-07 05:17:07+00:00| seen| https://gist.github.com/NaliangzzZ/44bfcc1d9c2cf275d2b6683ca9e20980 2025-03-21 14:19:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8344 2025-03-21 15:58:41+00:00| seen|...

CVE-2025-2060

creationtimestamp| type| source ---|---|--- 2025-03-07 03:34:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6791 2025-03-07 05:00:21+00:00| published-proof-of-concept| Telegram/nPMf5iGG8QkkWH0kZ8hey-bl3Jeh4J7G70yWHlbYzomSOE 2025-03-07 06:00:33+00:00| seen|...

CVE-2025-2061 code-projects Online Ticket Reservation System passenger.php cross site scripting

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-27816

A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploited due to the insecure deserialization of potentially untrusted messages. The vulnerability is present in the Windows PluginHost service, which runs on all the servers where...

CVE-2025-1121

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image...

CVE-2025-2047

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /search.php. The manipulation of the argument search leads to cross site scripting. It is possible to initiate the attack remotely. The exploi...

CVE-2025-2043

creationtimestamp| type| source ---|---|--- 2025-03-06 22:33:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6777 2025-03-07 01:33:21+00:00| seen| https://t.me/cvedetector/19764 2025-03-07 01:55:15+00:00| seen|...