CVE-2025-4093

Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 128.10 and Thunderbird 128.10...

CVE-2025-4089

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox 138 and Thunderbird 138...

CVE-2025-4091

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn33gwwd2l 2025-04-29 16:49:45+00:00| seen| https://t.me/cvedetector/24002 2026-04-13 17:55:16+00:00| seen| Telegram/Rk7hMmIKYATXlhQfFOdK5MJxTVeQfOKjkNlqS7PgiJwldc...

CVE-2025-4086

A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. This bug only affects Thunderbird for Android. Other versions of Thunderbird are unaffected.. This vulnerability was fixed in Firefox 138...

CERTFR-2025-CTI-006

creationtimestamp| type| source ---|---|--- 2025-04-29 13:07:36+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lnxdxzdtkz2d 2025-04-29 13:07:46+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114421403168054880 2025-04-30 07:38:56+00:00| seen|...

CVE-2025-3224

creationtimestamp| type| source ---|---|--- 2025-04-28 19:50:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114417325567011461 2025-04-28 20:11:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13732 2025-04-28 23:45:37+00:00| seen|...

CVE-2025-34489

creationtimestamp| type| source ---|---|--- 2025-04-28 19:11:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13725 2025-04-28 21:45:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvqh47l5w2g 2025-04-28 22:25:53+00:00| seen|...

CVE-2025-4004

creationtimestamp| type| source ---|---|--- 2025-04-28 09:41:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxjx6wf2y 2025-04-28 09:52:49+00:00| seen| https://t.me/cvedetector/23885 2025-05-02 11:15:33+00:00| published-proof-of-concept|...

CVE-2025-32470

creationtimestamp| type| source ---|---|--- 2025-04-28 09:40:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxje7we2b 2025-04-28 10:10:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13670 2025-04-28 12:53:28+00:00| seen|...

CVE-2025-4035

A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set...

PT-2025-18042 · WordPress · Admin/Site Enhancements (Ase) Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Admin and Site Enhancements ASE WordPress plugin versions prior to 7.6.10 Description: The issue concerns the use of a hardcoded password in the Password Protection feature of the Admin and Site Enhancements ASE WordPress plugin. This allows ...

Nazgul Nostromo nhttpd < 1.9.7 Multiple Directory Traversal Vulnerabilities

Nazgul Nostromo nhttpd is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

Vulnerability and Indicator of Compromise IoC Scanner for CV...

CVE-2025-46675

creationtimestamp| type| source ---|---|--- 2025-04-27 01:08:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13593 2025-04-27 01:48:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114407408963291150 2025-04-27 03:35:25+00:00| seen|...

Evaluating Organization Security: User Stories of European Union NIS2 Directive

The NIS2 directive requires EU Member States to ensure a consistently high level of cybersecurity by setting risk-management measures for essential and important entities. Evaluations are necessary to assess whether the required security level is met. This involves understanding the needs and goa...

PT-2025-17992 · Unknown · Itwanger Paicoding

Name of the Vulnerable Software and Affected Versions: itwanger paicoding version 1.0.3 Description: A vulnerability was found in the Browsing History Handler component, affecting some unknown functionality of the file "/user/home?userId=1&homeSelectType=read". The manipulation of this issue lead...

CVE-2025-46503

Server-Side Request Forgery SSRF vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows Server Side Request Forgery.This issue affects Simple Google Photos Grid: from n/a through = 1.5...

CVE-2025-2105

creationtimestamp| type| source ---|---|--- 2025-04-26 06:08:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13572 2025-04-26 06:13:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnp3etdzqxa2 2025-04-26 07:48:22+00:00| seen|...

CVE-2025-25045

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system...

CVE-2025-3935

creationtimestamp| type| source ---|---|--- 2025-04-25 18:46:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114400087294337009 2025-04-25 19:07:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13499 2025-04-25 21:30:14+00:00| seen|...