AI Code Hallucinations Increase the Risk of ‘Package Confusion’ Attacks

A new study found that code generated by AI is more likely to contain made-up information that can be used to trick software into interacting with malicious code...

CVE-2025-30391

creationtimestamp| type| source ---|---|--- 2025-04-30 17:21:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114428064949898924 2025-04-30 19:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114428642077120482 2025-04-30 20:30:46+00:00| seen|...

CVE-2025-32376

creationtimestamp| type| source ---|---|--- 2025-04-30 15:13:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14051 2025-04-30 16:07:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427772732716398 2025-04-30 17:55:10+00:00| seen|...

CVE-2025-4142

creationtimestamp| type| source ---|---|--- 2025-04-30 15:12:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114427554904223230 2025-04-30 23:14:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14191 2025-04-30 23:48:34+00:00| seen|...

CVE-2025-4114

creationtimestamp| type| source ---|---|--- 2025-04-30 12:12:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14008 2025-04-30 12:35:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114426941022216347 2025-04-30 13:48:40+00:00| seen|...

CVE-2025-4110

creationtimestamp| type| source ---|---|--- 2025-04-30 11:13:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14007 2025-04-30 13:55:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnzx4j7hll24 2025-04-30 14:34:07+00:00| seen|...

PT-2025-18333 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue concerns missing "no cache" headers in HCL Leap, which allows sensitive data to be cached. This could potentially expose confidential information. Recommendations: At the moment,...

CVE-2025-4093

Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 128.10 and Thunderbird 128.10...

CVE-2025-4089

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox 138 and Thunderbird 138...

CVE-2025-4091

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn33gwwd2l 2025-04-29 16:49:45+00:00| seen| https://t.me/cvedetector/24002 2026-04-13 17:55:16+00:00| seen| Telegram/Rk7hMmIKYATXlhQfFOdK5MJxTVeQfOKjkNlqS7PgiJwldc...

CVE-2025-4086

A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. This bug only affects Thunderbird for Android. Other versions of Thunderbird are unaffected.. This vulnerability was fixed in Firefox 138...

CERTFR-2025-CTI-006

creationtimestamp| type| source ---|---|--- 2025-04-29 13:07:36+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lnxdxzdtkz2d 2025-04-29 13:07:46+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114421403168054880 2025-04-30 07:38:56+00:00| seen|...

CVE-2025-3224

creationtimestamp| type| source ---|---|--- 2025-04-28 19:50:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114417325567011461 2025-04-28 20:11:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13732 2025-04-28 23:45:37+00:00| seen|...

CVE-2025-34489

creationtimestamp| type| source ---|---|--- 2025-04-28 19:11:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13725 2025-04-28 21:45:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvqh47l5w2g 2025-04-28 22:25:53+00:00| seen|...

CVE-2025-4004

creationtimestamp| type| source ---|---|--- 2025-04-28 09:41:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxjx6wf2y 2025-04-28 09:52:49+00:00| seen| https://t.me/cvedetector/23885 2025-05-02 11:15:33+00:00| published-proof-of-concept|...

CVE-2025-32470

creationtimestamp| type| source ---|---|--- 2025-04-28 09:40:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxje7we2b 2025-04-28 10:10:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13670 2025-04-28 12:53:28+00:00| seen|...

CVE-2025-4035

A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set...

PT-2025-18042 · WordPress · Admin/Site Enhancements (Ase) Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Admin and Site Enhancements ASE WordPress plugin versions prior to 7.6.10 Description: The issue concerns the use of a hardcoded password in the Password Protection feature of the Admin and Site Enhancements ASE WordPress plugin. This allows ...

Nazgul Nostromo nhttpd < 1.9.7 Multiple Directory Traversal Vulnerabilities

Nazgul Nostromo nhttpd is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

Vulnerability and Indicator of Compromise IoC Scanner for CV...