Fedora: Security Advisory (FEDORA-2025-3f807ca531)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-69af78a508)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-04847cb65d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-510a78f439)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-ae2925c3ae)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-e94782e579)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5149

creationtimestamp| type| source ---|---|--- 2025-05-25 13:46:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17507 2025-05-25 13:47:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpysc56jl7c2 2025-05-25...

CVE-2025-5156

creationtimestamp| type| source ---|---|--- 2025-05-25 07:14:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114567235034165547 2025-05-25 22:46:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17515 2025-05-25 22:56:44+00:00| seen|...

CVE-2025-5145

creationtimestamp| type| source ---|---|--- 2025-05-25 05:45:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17504 2025-05-25 06:09:15+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpxymhdeq722 2025-05-25...

CVE-2025-5128

creationtimestamp| type| source ---|---|--- 2025-05-24 16:21:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpwkh6kkwtz2 2025-05-24 16:45:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17493 2025-05-24...

WordPress Smart Forms plugin <= 2.6.98 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Joel Indra in WordPress Plugin Smart Forms versions = 2.6.98...

CVE-2025-48741

creationtimestamp| type| source ---|---|--- 2025-05-23 20:49:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17473 2025-05-23 21:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpuls4n2va2s...

GHSA-3C27-2M7H-F7RX

creationtimestamp| type| source ---|---|--- 2025-05-23 17:47:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17448...

CVE-2023-34873

creationtimestamp| type| source ---|---|--- 2025-05-23 17:44:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17439 2025-05-23 21:54:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpummxtfl32w...

CVE-2025-24916

creationtimestamp| type| source ---|---|--- 2025-05-23 16:46:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17423 2025-05-23 18:09:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpua2ab7wc2j 2025-05-23 23:29:35+00:00| seen|...

CVE-2025-48376

creationtimestamp| type| source ---|---|--- 2025-05-23 15:44:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17410 2025-05-23 17:54:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpu77ewyrw2m 2025-05-23 23:29:36+00:00| seen|...

CERTFR-2025-CTI-008

creationtimestamp| type| source ---|---|--- 2025-05-23 15:19:56+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114557818959394607...

CVE-2018-25110

Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service ReDoS attack due to catastrophic backtracking in several regular expressions used for parsing HTML tags and markdown links. An attacker can exploit this vulnerability by providing specially crafted markdown...

CVE-2025-47631

creationtimestamp| type| source ---|---|--- 2025-05-23 15:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptvzatli62s...

Malicious code in @dbtw/mfe-gateway (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fafde4d408da1ab81fb068824fa886f677ddb1b507e9f1040b740152f58adb3 Any computer that has this package installed or running should be considered...