4836 matches found
CVE-2025-48882
creationtimestamp| type| source ---|---|--- 2025-05-29 08:11:39+00:00| published-proof-of-concept| https://github.com/PHPOffice/Math/security/advisories/GHSA-42hm-pq2f-3r7m 2025-05-30 20:15:02+00:00| seen|...
Malicious code in pancake_uniswap_validators_utils_snipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 791d7ac8f5692ffcb4db92ed0986a9f6c422640fbbe19c1522dbbc0f813aaeb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Wireshark Multiple Vulnerabilities (May 2025) - Windows
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
CVE-2025-48865
creationtimestamp| type| source ---|---|--- 2025-05-28 22:32:03+00:00| published-proof-of-concept| https://github.com/fabiolb/fabio/security/advisories/GHSA-q7p4-7xjv-j3wf 2025-05-30 06:49:22+00:00| seen|...
CVE-2025-48930
The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues...
CVE-2025-48929
The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential e.g., not a token with a short expiration time that can be reused at a later date if discovered by an adversary...
CVE-2025-48926
The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses, passwords, and telephone numbers...
CVE-2025-45997
creationtimestamp| type| source ---|---|--- 2025-05-28 15:22:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaiud5pwjr2 2025-05-28 15:22:48+00:00| seen|...
CVE-2025-5277
creationtimestamp| type| source ---|---|--- 2025-05-28 13:56:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114585800636728854 2025-05-28 15:27:28+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaj63cav5t2...
CVE-2025-4493
creationtimestamp| type| source ---|---|--- 2025-05-28 12:54:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114585560171227469 2025-05-28 15:22:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaiupdy22z2 2025-05-28...
CVE-2025-48846
creationtimestamp| type| source ---|---|--- 2025-05-28 07:30:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7onaue5g2r...
Malicious code in loglinea (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 799f4899d8d2f6f45f1548fbb2b601f27c8f078d7b0db92af859a074f8dc3971 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-4947
creationtimestamp| type| source ---|---|--- 2025-05-28 03:48:12+00:00| seen| https://daniel.haxx.se/blog/2025/05/28/curl-8-14-0/ 2025-05-28 03:51:53+00:00| seen| https://seclists.org/oss-sec/2025/q2/173 2025-05-28 07:45:19+00:00| seen|...
CVE-2024-26579
creationtimestamp| type| source ---|---|--- 2025-05-28 01:35:05+00:00| seen| https://seclists.org/oss-sec/2025/q2/171...
CVE-2025-48929
The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential e.g., not a token with a short expiration time that can be reused at a later date if discovered by an adversary...
EUVD-2025-16214
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025...
CVE-2025-48930
The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues...
CVE-2025-48927
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...