CVE-2025-20644

creationtimestamp| type| source ---|---|--- 2025-03-03 03:33:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6143 2025-03-03 04:39:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljh4ymgfsw2d 2025-03-03 05:29:57+00:00| seen| https://t.me/cvedetector/19...

CVE-2025-20647

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2025-27219

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service DoS vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when...

CVE-2025-27219

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service DoS vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when...

CVE-2025-1833

creationtimestamp| type| source ---|---|--- 2025-03-02 22:29:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6113 2025-03-03 01:18:17+00:00| seen| https://t.me/cvedetector/19273 2025-03-03 02:34:09+00:00| seen|...

CVE-2025-1821 zj1983 zz ZorgAction.java getUserOrgForUserId sql injection

A vulnerability was found in zj1983 zz up to 2024-8 and classified as critical. Affected by this issue is the function getUserOrgForUserId of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument userID leads to sql injection. The attack may be launched...

CVE-2024-36353

Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality...

CVE-2025-1813

creationtimestamp| type| source ---|---|--- 2025-03-02 10:31:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6092 2025-03-02 11:47:01+00:00| seen| Telegram/9xeHjlqe2FqnBwCwLppGpa3SHlCxjwuaPPoNHveS16LI4y 2025-03-02 12:24:16+00:00| seen|...

CVE-2025-26202

creationtimestamp| type| source ---|---|--- 2025-03-01 13:43:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/16234 2025-03-01 22:00:06+00:00| published-proof-of-concept| Telegram/fKkzDe0DNuSMMVqiQoko1Vv8grXi6DqZ0Ry-nyZ1VeIGY8 2025-03-04 21:15:00+00:00| seen|...

CVE-2025-26136

creationtimestamp| type| source ---|---|--- 2025-03-01 04:22:11+00:00| seen| https://gist.github.com/xiadmin6/6d664692d31a04eb59096a488b9f3712 2025-03-04 23:54:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljlnylxgxg2f 2025-03-05 00:12:48+00:00| seen|...

CVE-2025-23117

creationtimestamp| type| source ---|---|--- 2025-03-01 02:27:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6033 2025-03-01 06:24:40+00:00| seen| https://t.me/cvedetector/19204 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-379/ 2025-08-19 18:29:29+00:0...

CVE-2025-25329

An issue in Tencent Technology Beijing Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-27408 Manifest Uses a One-Way Hash without a Salt

Manifest offers users a one-file micro back end. Prior to version 4.9.2, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt,...

CVE-2025-1572

creationtimestamp| type| source ---|---|--- 2025-02-28 08:26:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5848 2025-02-28 09:43:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lja4mfgbzi26 2025-02-28 11:10:39+00:00| seen| https://t.me/cvedetector/19147 2025-03-02...

CVE-2025-1662 URL Media Uploader <= 1.0.0 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebinding

The URL Media Uploader plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.0 via the 'urlmediauploaderurlupload' action. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrar...

CVE-2024-13832

CVE-2024-13832 – Ultra Addons Lite for Elementor (WordPress) is confirmed in connected documents as an information disclosure vulnerability. It affects Ultra Addons Lite for Elementor

CVE-2025-21818

No description is available for this CVE...

CVE-2025-21809

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix peer hash locking vs RCU callback In its address list, afs now retains pointers to and refs on one or more rxrpcpeer objects. The address list is freed under RCU and at this time, it puts the refs on those peers...

CVE-2025-21813

In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connection Before attaching a new root to the old root, the children counter of the new root is checked to verify that only the upcoming CPU's top group have been connected to it. However...