CVE-2025-3510

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14436 2025-05-02 07:34:41+00:00| seen| https://t.me/cvedetector/24316 2025-05-02 08:00:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7qccvf2h...

CVE-2024-13322

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14433 2025-05-02 07:34:50+00:00| seen| https://t.me/cvedetector/24323 2025-05-02 13:06:20+00:00| confirmed|...

CVE-2024-13420

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14432 2025-05-02 07:34:42+00:00| seen| https://t.me/cvedetector/24317 2025-05-02 08:00:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7ptwoy2e...

Malicious code in socket-event-trigger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84c96a1eba1263914947232b5710b1f74986be68b124fefcbd733643ddd31c47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4197

creationtimestamp| type| source ---|---|--- 2025-05-02 02:18:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14421 2025-05-02 05:04:03+00:00| seen| https://t.me/cvedetector/24302...

CVE-2025-27365

creationtimestamp| type| source ---|---|--- 2025-05-01 22:21:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14409 2025-05-02 02:01:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5q5aorbs24 2025-05-02 03:23:47+00:00| seen| https://t.me/cvedetector/24299...

CVE-2025-46625

creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cpttur72p 2025-05-01 23:12:36+00:00| seen| https://t.me/cvedetector/24268 2025-05-02 14:15:54+00:00| published-proof-of-concept|...

CVE-2025-46634

creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cptgga32p 2025-05-01 23:12:32+00:00| seen| https://t.me/cvedetector/24266 2025-05-02 15:17:01+00:00| published-proof-of-concept|...

WordPress KiwiChat NextClient plugin <= 6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via url Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin KiwiChat NextClient versions = 6.2...

CVE-2025-44839

creationtimestamp| type| source ---|---|--- 2025-05-01 17:15:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14332 2025-05-01 20:41:54+00:00| seen| https://t.me/cvedetector/24255...

CVE-2022-49856

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2022-49848

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-combo: fix NULL-deref on runtime resume Commit fc64623637da "phy: qcom-qmp-combo,usb: add support for separate PCSUSB region" started treating the PCSUSB registers as potentially separate from the PCS registers but...

CVE-2022-49910

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free caused by l2capreassemblesdu Fix the race condition between the following two flows that run in parallel: 1. l2capreassemblesdu - chan-ops-recv l2capsockrecvcb - sockqueuercvskb. 2...

CVE-2022-49928

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed There is a null-ptr-deref when xps sysfs alloc failed: BUG: KASAN: null-ptr-deref in sysfsdocreatelinksd+0x40/0xd0 Read of size 8 at addr 0000000000000030 by task gssproxy/45...

CVE-2022-49806

In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: Fix potential null-ptr-deref in sparxstatsinit and sparx5start sparxstatsinit calls createsinglethreadworkqueue and not checked the ret value, which may return NULL. And a null-ptr-deref may happen:...

CVE-2022-49811

In the Linux kernel, the following vulnerability has been resolved: drbd: use after free in drbdcreatedevice The drbddestroyconnection frees the "connection" so use the safe iterator to prevent a use after free...

CVE-2022-49912

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ulist leaks in error paths of qgroup self tests In the testnosharedqgroup and testmultiplerefs qgroup self tests, if we fail to add the tree ref, remove the extent item or remove the extent ref, we are returning from t...

CVE-2022-49908

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix memory leak in vhciwrite Syzkaller reports a memory leak as follows: ==================================== BUG: memory leak unreferenced object 0xffff88810d81ac00 size 240: ... hex dump first 32 bytes: 00 00 ...

CVE-2022-49808

In the Linux kernel, the following vulnerability has been resolved: net: dsa: don't leak tagger-owned storage on switch driver unbind In the initial commit dc452a471dba "net: dsa: introduce tagger-owned storage for private and shared data", we had a call to tagops-disconnectdst issued from...

CVE-2022-49887

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix possible refcount leak in vdecprobe v4l2deviceunregister need to be called to put the refcount got by v4l2deviceregister when vdecprobe fails or vdecremove is called...