CVE-2025-4948

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

CVE-2025-4931

creationtimestamp| type| source ---|---|--- 2025-05-19 13:13:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnjw4262n...

CERTFR-2025-ACT-021

creationtimestamp| type| source ---|---|--- 2025-05-19 12:23:14+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lpjkt4sinn2g 2025-05-19 12:23:15+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114534474947199584 2025-05-19 13:48:07+00:00| seen|...

CVE-2025-4929

creationtimestamp| type| source ---|---|--- 2025-05-19 11:44:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpjin6b6pym2 2025-05-19 13:13:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnkfbgr24...

CVE-2025-4924

creationtimestamp| type| source ---|---|--- 2025-05-19 09:38:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16836 2025-05-19 13:13:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnjmvep2p...

CVE-2025-27566

creationtimestamp| type| source ---|---|--- 2025-05-19 08:56:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpj7bwaamv62 2025-05-21 03:11:31+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lpnmwf7x6k24...

CVE-2025-47750

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16830 2025-05-19 09:13:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpja7z3e322w...

CVE-2025-47759

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16821 2025-05-19 09:13:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjaa2djb32v...

CVE-2025-37891

In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function from MIDI 1.0 to UMP packet contains an internal buffer to keep the incoming MIDI bytes, and its size is 4, as it was supposed to be the max...

CVE-2025-46801

Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or...

Malicious code in feast-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88382c749d318e08be547eac655736cdeb1c86d92ae6ab6dd46e489e668c86f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Plugin Oficial – Getnet para WooCommerce plugin < 1.8.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Plugin Oficial – Getnet para WooCommerce versions 1.8.1...

WordPress EKC Tournament Manager plugin < 2.2.2 - Admin+ Arbitrary File Download vulnerability

Admin+ Arbitrary File Download vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin EKC Tournament Manager versions 2.2.2...

CVE-2025-31213

creationtimestamp| type| source ---|---|--- 2025-05-19 03:23:01+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lpimn42o5k2k 2026-04-02 22:16:45+00:00| seen| Telegram/LxwhYgp3VyykJFkTybHSMczvBDUi5kkG99Yg-gAxQSwVjzg...

WordPress MapPress Maps for WordPress plugin < 2.93 - Admin+ Stored XSS via Map Settings vulnerability

Admin+ Stored XSS via Map Settings vulnerability discovered by Kientt in WordPress Plugin MapPress Maps for WordPress versions 2.93...

CVE-2025-4905

creationtimestamp| type| source ---|---|--- 2025-05-19 02:38:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16789 2025-05-19 05:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissi7n642h...

CVE-2025-4906

creationtimestamp| type| source ---|---|--- 2025-05-19 02:38:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16788 2025-05-19 05:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissiqwkl2p...

CVE-2025-23167

A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using \r\n\rX instead of the required \r\n\r\n. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by...

WordPress Podlove Podcast Publisher plugin < 4.2.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Podlove Podcast Publisher versions 4.2.1...

WordPress Photo Gallery, Images, Slider in Rbs Image Gallery plugin < 3.2.24 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Robo Gallery versions 3.2.24...