CVE-2025-47290

creationtimestamp| type| source ---|---|--- 2025-05-20 18:40:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114541619532659321 2025-05-21 01:55:42+00:00| seen| https://bsky.app/profile/bentheelder.bsky.social/post/3lpniot27bs2r 2025-05-22 02:18:16+00:00| seen|...

CVE-2025-37978

creationtimestamp| type| source ---|---|--- 2025-05-20 17:46:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17037 2025-05-20 19:55:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114541915882776475...

CVE-2025-48017

creationtimestamp| type| source ---|---|--- 2025-05-20 15:55:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114540972450474399 2025-05-20 16:28:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpmixheoums2...

CVE-2025-41228

creationtimestamp| type| source ---|---|--- 2025-05-20 14:48:23+00:00| seen| https://bsky.app/profile/andersonc0d3.bsky.social/post/3lpmdfkawoc2w 2025-05-20 14:48:26+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/114540708203094327 2025-05-20 14:54:00+00:00| seen|...

CVE-2025-41226

creationtimestamp| type| source ---|---|--- 2025-05-20 14:48:22+00:00| seen| https://bsky.app/profile/andersonc0d3.bsky.social/post/3lpmdfkawoc2w 2025-05-20 14:48:25+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/114540708203094327 2025-05-20 14:54:00+00:00| seen|...

CVE-2025-41225

creationtimestamp| type| source ---|---|--- 2025-05-20 14:48:22+00:00| seen| https://bsky.app/profile/andersonc0d3.bsky.social/post/3lpmdfkawoc2w 2025-05-20 14:48:25+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/114540708203094327 2025-05-20 14:54:00+00:00| seen|...

CVE-2025-41231

creationtimestamp| type| source ---|---|--- 2025-05-20 13:40:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16970 2025-05-20 13:52:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114540488102560446 2025-05-20 15:00:33+00:00| seen|...

CVE-2025-40634

creationtimestamp| type| source ---|---|--- 2025-05-20 10:40:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16965 2025-05-20 13:57:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114540507625728849 2025-05-20 13:57:42+00:00| seen|...

CVE-2025-2929

creationtimestamp| type| source ---|---|--- 2025-05-20 06:39:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16953 2025-05-20 07:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lplkbgrhj42o...

PT-2025-22374

Name of the Vulnerable Software and Affected Versions sr feuser register extension for TYPO3 versions through 12.4.8 Description The issue allows for Insecure Direct Object Reference, enabling attackers to read arbitrary files. This could potentially lead to unauthorized access to sensitive...

CVE-2025-47282

creationtimestamp| type| source ---|---|--- 2025-05-19 18:12:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114535847071295088 2025-05-20 13:40:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16971...

CVE-2025-3908

creationtimestamp| type| source ---|---|--- 2025-05-19 15:39:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16863 2025-05-19 17:22:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114535651589428390...

CVE-2025-47756

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16824 2025-05-19 09:13:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjaa2aofg2p...

CVE-2025-48135

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aptivadadev Aptivada for WP aptivada-for-wp allows DOM-Based XSS.This issue affects Aptivada for WP: from n/a through = 2.0.0...

CVE-2025-4883

creationtimestamp| type| source ---|---|--- 2025-05-18 15:56:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphg6xe2qnp2 2025-05-18 17:12:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lphkjylrei2t...

CVE-2025-4835

creationtimestamp| type| source ---|---|--- 2025-05-17 20:26:06+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfeuj4t7t22 2025-05-17 21:07:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfh7c775a2s...

CGA-M2Q3-JW38-78PR

Bulletin has no description...

CVE-2025-40907

A flaw was found in the FCGI library. In affected versions, specially crafted nameLen or valueLen values in data sent to the IPC socket may result in a heap-based buffer overflow, which can cause an application crash or other undefined behavior. This occurs in ReadParams in fcgiapp.c...

CVE-2025-4600

creationtimestamp| type| source ---|---|--- 2025-05-16 14:12:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114517919488436129 2025-05-16 17:02:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpcizo4hue2e...

CVE-2025-3877

The Mozilla Foundation's Security Advisory describes the following issue: A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused...