CVE-2025-46675

creationtimestamp| type| source ---|---|--- 2025-04-27 01:08:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13593 2025-04-27 01:48:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114407408963291150 2025-04-27 03:35:25+00:00| seen|...

Evaluating Organization Security: User Stories of European Union NIS2 Directive

The NIS2 directive requires EU Member States to ensure a consistently high level of cybersecurity by setting risk-management measures for essential and important entities. Evaluations are necessary to assess whether the required security level is met. This involves understanding the needs and goa...

PT-2025-17992 · Unknown · Itwanger Paicoding

Name of the Vulnerable Software and Affected Versions: itwanger paicoding version 1.0.3 Description: A vulnerability was found in the Browsing History Handler component, affecting some unknown functionality of the file "/user/home?userId=1&homeSelectType=read". The manipulation of this issue lead...

CVE-2025-46503

Server-Side Request Forgery SSRF vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows Server Side Request Forgery.This issue affects Simple Google Photos Grid: from n/a through = 1.5...

CVE-2025-2105

creationtimestamp| type| source ---|---|--- 2025-04-26 06:08:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13572 2025-04-26 06:13:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnp3etdzqxa2 2025-04-26 07:48:22+00:00| seen|...

CVE-2025-25045

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system...

CVE-2025-3935

creationtimestamp| type| source ---|---|--- 2025-04-25 18:46:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114400087294337009 2025-04-25 19:07:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13499 2025-04-25 21:30:14+00:00| seen|...

CVE-2025-3638

creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq75awk32r 2025-04-25 19:48:21+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114400329815274389 2025-04-26 03:42:03+00:00| seen|...

CVE-2025-22655

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Caio Web Dev CWD – Stealth Links cwd-stealth-links allows SQL Injection.This issue affects CWD – Stealth Links: from n/a through = 1.3...

GHSA-69M9-RPRC-2X7G Moodle reveals student identities through assignment submissions search on anonymous submissions

A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities...

CVE-2025-3647

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

CVE-2025-3643 Moodle: reflected xss risk in policy tool

A flaw was found in Moodle. The return URL in the policy tool required additional sanitizing to prevent a reflected Cross-site scripting XSS risk...

CVE-2025-22235

creationtimestamp| type| source ---|---|--- 2025-04-25 07:36:27+00:00| seen| https://bsky.app/profile/snicoll.be/post/3lnmplyg7ms23 2025-04-26 02:12:41+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lnony6qhj42b 2025-04-28 08:10:50+00:00| seen|...

CVE-2025-46617

creationtimestamp| type| source ---|---|--- 2025-04-25 07:07:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13391 2025-04-25 07:07:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxzjsx432 2025-04-25 09:20:20+00:00| seen|...

PT-2025-18252 · Ctrlx Os · Ctrlx Os

Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated low-privileged attacker to recover the plaintext passwords of other users. Recommendations: At...

Korenix JetNet Use of Hard-Coded Credentials (CVE-2017-14027)

A Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and...

Ubuntu: Security Advisory (USN-7459-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-37516

CVE-2023-37516 affects HCL Leap; the root cause is missing no-cache headers, which permits caching of user directory information. The vulnerability is described with a CVSSv3.1 base score of 3.2 (LOW) with LOCAL attack vector, requiring user interaction and low privileges. There is no explicit ex...

CVE-2023-37516 HCL Leap is affected by missing "no cache" headers

Missing "no cache" headers in HCL Leap permits user directory information to be cached...

CVE-2025-43865

creationtimestamp| type| source ---|---|--- 2025-04-24 14:55:19+00:00| published-proof-of-concept| https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j 2025-04-25 01:10:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13366 2025-04-25...