CVE-2025-2294

creationtimestamp| type| source ---|---|--- 2025-03-28 00:00:06+00:00| published-proof-of-concept| Telegram/IpSkdng-DvuBirFh-8nYsY3OgxKRFdquSrS72XmwTlTwLs 2025-03-28 04:00:06+00:00| published-proof-of-concept| Telegram/-T7fiB1UH9VRuMWqeF5wAirAQ9WEH4yGxP0ggrYXPxHLtk 2025-03-28 04:29:56+00:00|...

CVE-2023-52984

A flaw was found in the dp83822 module in the Linux kernel. A private data pointer is only initialized by the DP83822 PHY. It is left uninitialized by other smaller models, allowing a NULL pointer dereference to be triggered due to missing checks when interrupts are being configured, causing a...

CVE-2024-4750

creationtimestamp| type| source ---|---|--- 2025-03-27 21:27:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9220...

CVE-2023-52994

In the Linux kernel, the following vulnerability has been resolved: acpi: Fix suspend with Xen PV Commit f1e525009493 "x86/boot: Skip realmode init code when running as Xen PV guest" missed one code path accessing realmodeheader, leading to dereferencing NULL when suspending the system under Xen:...

CVE-2023-53000

In the Linux kernel, the following vulnerability has been resolved: netlink: prevent potential spectre v1 gadgets Most netlink attributes are parsed and validated from nlavalidateparse or validatenla u16 type = nlatypenla; if type == 0 || type maxtype / error or continue / @type is then used as a...

CVE-2023-53012

In the Linux kernel, the following vulnerability has been resolved: thermal: core: call putdevice only after deviceregister fails putdevice shouldn't be called before a prior call to deviceregister. thermalcoolingdeviceregister doesn't follow that properly and needs fixing. Also...

DEBIAN-CVE-2023-53032

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. When firstip is 0, lastip is 0xFFFFFFFF, and netmask is 31, the value of an arithmetic expression 2 netmask - maskbits - 1 is subject to overflow due to ...

CVE-2024-53678

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache VCL. Users can modify form data submitted when requesting a new Block Allocation such that a SELECT SQL statement is modified. The data returned by the SELECT statement is not viewable by th...

CVE-2025-31139

JetBrains TeamCity prior to 2025.03 exposes base64 encoded passwords in build logs (CVE-2025-31139). Affects JetBrains TeamCity (CI/CD server); vulnerability arises from passwords being logged in base64 form. Impact: potential credential exposure. Mitigation: upgrade to version 2025.03 or later o...

lunary cross-site scripting vulnerability (CNVD-2025-08307)

lunary is lunary open source a production toolkit for LLM . lunary cross-site scripting vulnerability , the vulnerability stems from the SAML IdP XML metadata on user-supplied data lack of effective filtering and escaping , an attacker can use the vulnerability to obtain and modify sensitive...

PT-2025-13287

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the fpga: m10bmc-sec module. The issue was related to handling probe error rollbacks, which could lead to leaks if...

CVE-2025-30353

creationtimestamp| type| source ---|---|--- 2025-03-26 20:34:49+00:00| seen| https://t.me/cvedetector/21203 2025-03-28 02:54:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llfssjrsbb2m 2025-03-28 08:52:53+00:00| seen|...

CVE-2025-30232

creationtimestamp| type| source ---|---|--- 2025-03-26 15:06:51+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3llc2rx277m2d 2025-03-26 15:38:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llc4kw3ufk2v 2025-03-27 06:23:06+00:00| seen|...

CVE-2025-30586

Cross-Site Request Forgery CSRF vulnerability in bbodine1 cTabs ctabs allows Stored XSS.This issue affects cTabs: from n/a through = 1.3...

CVE-2025-1912

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the validatefile Function. This makes it possible for authenticated attackers, with Administrator-level...

Microsoft Windows Multiple Vulnerabilities (KB5044284)

This host is missing an important security update according to Microsoft KB5044284 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5050009)

This host is missing an important security update according to Microsoft KB5050009 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

23andMe bankruptcy: How to delete your data and stay safe from the 2023 breach

The genetic testing company 23andMe filed for bankruptcy on Sunday, announcing that, in searching for financial stability through its sale to a new owner, the business will continue operating as normal, including in how customer data is handled. “The company intends to continue operating its...

CVE-2024-55963

creationtimestamp| type| source ---|---|--- 2025-03-25 16:43:16+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ll7ppfyype2q 2025-03-25 17:39:32+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3ll7su2ssvy2a 2025-03-25 21:24:36+00:00| seen|...

CVE-2022-24999

creationtimestamp| type| source ---|---|--- 2025-03-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-01 2025-04-29 14:11:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13813 2025-11-09 09:16:12+00:00| seen|...