CVE-2024-37361

The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid. CWE-502 Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, deserialize untrusted JSON data without constraining the parser to...

CVE-2024-45674 IBM Security Verify Bridge information disclosure

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores potentially sensitive information in log files that could be read by a local user...

CVE-2025-25769

creationtimestamp| type| source ---|---|--- 2025-02-21 22:17:18+00:00| seen| https://t.me/cvedetector/18688 2025-02-24 18:26:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5201 2025-02-24 19:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n4v65s23 2025-02-24...

CVE-2025-26622 sqrt doesn't define rounding behavior in Vyper

vyper is a Pythonic Smart Contract Language for the EVM. Vyper sqrt builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. This issue is being addressed a...

CVE-2025-1403

creationtimestamp| type| source ---|---|--- 2025-02-21 17:18:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4917 2025-02-21 18:30:59+00:00| published-proof-of-concept| Telegram/jfTnJZZ5uFqsUFFPSgzOmVcBPm9fNtArLaitrRuQl86f-A 2025-02-21 19:07:13+00:00| seen|...

MAL-2025-1511 Malicious code in spacelift-webhook-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6bb9dc87c1669be92bee0be50a372fb87d1d92064bc4db257131d4323c2783e9 The OpenSSF Package Analysis project identified 'spacelift-webhook-receiver' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

CVE-2024-9150

creationtimestamp| type| source ---|---|--- 2025-02-21 12:18:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4883 2025-02-21 15:26:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jh67j52r 2025-02-21 15:35:56+00:00| seen|...

CVE-2025-1489

creationtimestamp| type| source ---|---|--- 2025-02-21 11:18:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4879 2025-02-21 15:26:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhjfi32s 2025-02-21 15:35:58+00:00| seen| https://t.me/cvedetector/18654 2025-08-25...

CVE-2024-13713

creationtimestamp| type| source ---|---|--- 2025-02-21 11:18:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4878 2025-02-21 15:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhmsok26 2025-02-21 15:35:51+00:00| seen| https://t.me/cvedetector/18649...

CVE-2024-13846

Public details on CVE-2024-13846 are limited in the provided documents. No connected sources with concrete technical specifics (affected versions, root cause, exploit details, or fixes) are present. Monitor for updates as new info becomes available.

CVE-2025-23115

creationtimestamp| type| source ---|---|--- 2025-02-21 06:03:43+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lio52ao6nk2s 2025-02-21 06:03:50+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lio52kijak2k 2025-02-21 06:11:23+00:00| seen|...

[SECURITY] [DSA 5869-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5869-1 [email protected] https://www.debian.org/security/ Andres Salomon February 21, 2025 https://www.debian.org/security/faq -...

CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

CVE-2025-25667

creationtimestamp| type| source ---|---|--- 2025-02-20 23:16:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4826 2025-02-21 00:55:14+00:00| seen| https://t.me/cvedetector/18610 2025-02-21 19:48:42+00:00| seen|...

CVE-2025-25958

Cross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via a crafted script...

CVE-2025-26305

creationtimestamp| type| source ---|---|--- 2025-02-20 19:00:24+00:00| seen| https://t.me/cvedetector/18559 2025-02-21 21:22:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4984 2025-02-21 23:48:51+00:00| seen|...

CVE-2025-26304

creationtimestamp| type| source ---|---|--- 2025-02-20 19:00:23+00:00| seen| https://t.me/cvedetector/18558 2025-02-21 21:22:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4985 2025-02-21 23:48:51+00:00| seen|...

CVE-2025-26305

A memory leak has been identified in the parseSWFSOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

Important: Red Hat Security Advisory: postgresql security update

An update for postgresql is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...