CVE-2025-3811

creationtimestamp| type| source ---|---|--- 2025-05-09 02:25:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15656 2025-05-09 04:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lopmefntwq2p 2025-05-09 05:01:06+00:00| seen|...

CVE-2025-4443

creationtimestamp| type| source ---|---|--- 2025-05-09 00:25:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15647 2025-05-09 01:15:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lop5uf3hggr2 2025-05-09...

CVE-2025-0505

creationtimestamp| type| source ---|---|--- 2025-05-08 19:37:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114473898879191172 2025-05-08 19:48:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojsl7l3y2 2025-05-08...

CVE-2024-11186

creationtimestamp| type| source ---|---|--- 2025-05-08 19:24:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15598 2025-05-08 19:37:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114473898879191172 2025-05-08 19:48:29+00:00| seen|...

CVE-2025-44021

OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling if a deployment was performed via the API. A malicious project assigned as a node owner can provide a path to any local file readable by ironic-conductor, which may then be written to the target...

CVE-2025-45819

creationtimestamp| type| source ---|---|--- 2025-05-08 15:24:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15546 2025-05-08 16:48:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loodkeflmy22 2025-05-08...

CVE-2025-45818

creationtimestamp| type| source ---|---|--- 2025-05-08 15:24:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15545 2025-05-08 16:48:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loodjlw7a5j2 2025-05-08...

CVE-2022-49843

creationtimestamp| type| source ---|---|--- 2025-05-08 11:23:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15513...

CVE-2025-4098

creationtimestamp| type| source ---|---|--- 2025-05-08 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-01 2025-05-08 18:24:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15579 2025-05-08 19:45:37+00:00| seen|...

CVE-2025-1254

creationtimestamp| type| source ---|---|--- 2025-05-08 09:23:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15503 2025-05-08 11:29:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lonnsr3sfq42 2025-05-08 11:30:59+00:00| seen|...

CVE-2025-37820

creationtimestamp| type| source ---|---|--- 2025-05-08 07:23:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15489 2025-05-08 08:31:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loniqrg3wy2h 2025-05-08 11:45:05+00:00| seen|...

CVE-2025-46336

Rack::Session is a session management implementation for Rack. In versions starting from 2.0.0 to before 2.1.1, when using the Rack::Session::Pool middleware, and provided the attacker can acquire a session cookie already a major issue, the session may be restored if the attacker can trigger a lo...

CVE-2025-37801

In the Linux kernel, the following vulnerability has been resolved: spi: spi-imx: Add check for spiimxsetupxfer Add check for the return value of spiimxsetupxfer. spiimx-rx and spiimx-tx function pointer can be NULL when spiimxsetupxfer return error, and make NULL pointer dereference. Unable to...

CVE-2025-37811

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: cihdrcimx: fix usbmisc handling usbmisc is an optional device property so it is totally valid for the corresponding data-usbmiscdata to have a NULL value. Check that before dereferencing the pointer. Found by Linux...

CVE-2025-37803

In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting sizelimitmb to u64 when calculate pglimit...

CVE-2025-37819

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2mgetfwnode With ACPI in place, gicv2mgetfwnode is registered with the pci subsystem as pcimsigetfwnodecb, which may get invoked at runtime during a PCI host bridge probe. But, the...

CVE-2025-37816

In the Linux kernel, the following vulnerability has been resolved: mei: vsc: Fix fortify-panic caused by invalid countedby use gcc 15 honors the countedbylen attribute on vsctppacket.buf and the vsc-tp.c code is using this in a wrong way. len does not contain the available size in the buffer, it...

CVE-2025-37817

In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleonparsegdd In chameleonparsegdd, if mcbdeviceregister fails, 'mdev' would be released in mcbdeviceregister via putdevice. Thus, goto 'err' label and free 'mdev' again causes a double free. Jus...

CVE-2025-47729

CVE-2025-47729 relates to TeleMessage’s archiving backend (TM SGNL/Archive Signal). The public records state that the archiving backend stores cleartext copies of user messages, contrary to the stated end-to-end encryption claim, and this exposure has been exploited in the wild as of May 2025. Th...

CVE-2025-32441

creationtimestamp| type| source ---|---|--- 2025-05-07 23:23:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15460 2025-05-07 23:30:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomkcpp7t3r2 2025-05-08...