CVE-2025-22655

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Caio Web Dev CWD – Stealth Links cwd-stealth-links allows SQL Injection.This issue affects CWD – Stealth Links: from n/a through = 1.3...

GHSA-69M9-RPRC-2X7G Moodle reveals student identities through assignment submissions search on anonymous submissions

A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities...

CVE-2025-3647

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

CVE-2025-3643 Moodle: reflected xss risk in policy tool

A flaw was found in Moodle. The return URL in the policy tool required additional sanitizing to prevent a reflected Cross-site scripting XSS risk...

CVE-2025-22235

creationtimestamp| type| source ---|---|--- 2025-04-25 07:36:27+00:00| seen| https://bsky.app/profile/snicoll.be/post/3lnmplyg7ms23 2025-04-26 02:12:41+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lnony6qhj42b 2025-04-28 08:10:50+00:00| seen|...

CVE-2025-46617

creationtimestamp| type| source ---|---|--- 2025-04-25 07:07:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13391 2025-04-25 07:07:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxzjsx432 2025-04-25 09:20:20+00:00| seen|...

PT-2025-18252 · Ctrlx Os · Ctrlx Os

Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated low-privileged attacker to recover the plaintext passwords of other users. Recommendations: At...

Korenix JetNet Use of Hard-Coded Credentials (CVE-2017-14027)

A Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and...

Ubuntu: Security Advisory (USN-7459-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-37516

CVE-2023-37516 affects HCL Leap; the root cause is missing no-cache headers, which permits caching of user directory information. The vulnerability is described with a CVSSv3.1 base score of 3.2 (LOW) with LOCAL attack vector, requiring user interaction and low privileges. There is no explicit ex...

CVE-2023-37516 HCL Leap is affected by missing "no cache" headers

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

CVE-2025-43865

creationtimestamp| type| source ---|---|--- 2025-04-24 14:55:19+00:00| published-proof-of-concept| https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j 2025-04-25 01:10:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13366 2025-04-25...

CVE-2025-43864

creationtimestamp| type| source ---|---|--- 2025-04-24 14:55:06+00:00| published-proof-of-concept| https://github.com/remix-run/react-router/security/advisories/GHSA-f46r-rw29-r322 2025-04-25 01:10:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13367 2025-04-25...

CVE-2025-27820

creationtimestamp| type| source ---|---|--- 2025-04-24 12:06:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13216 2025-04-24 13:09:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114393098223959645 2025-04-24 14:16:47+00:00| seen|...

CVE-2025-46272

creationtimestamp| type| source ---|---|--- 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06 2025-04-25 00:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnlx7ktjya2r 2025-04-25 01:30:05+00:00| seen|...

ROS-20250424-09

The vulnerability in Google Chrome and Microsoft Edge browsers is related to the possibility of memory usage after a release. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity, and availability of protected information. confidentiality,...

CVE-2024-22351 IBM InfoSphere Information Server session fixation

IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...

CVE-2025-3904

creationtimestamp| type| source ---|---|--- 2025-04-23 21:10:15+00:00| seen| https://t.me/cvedetector/23597 2025-04-23 21:14:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnj4fbjjtn2d...

CVE-2025-2772

BEC Technologies routers are affected by CVE-2025-2772, where the flaw in /cgi-bin/tools_usermanage.asp leads to client-side handling of a list of users and credentials. This enables network-adjacent attackers to disclose transported credentials without authentication. The vulnerability impacts a...

CVE-2025-2770

CVE-2025-2770 is linked to BEC Technologies Multiple Routers. The vulnerability arises from storing credentials in a recoverable (cleartext) format in the web-based user interface, allowing a remote attacker to disclose stored passwords after authentication. Exploitation details, affected models/...