CVE-2025-30074

Alludo Parallels Desktop before 19.4.2 and 20.x before 20.2.2 for macOS on Intel platforms allows privilege escalation to root via the VM creation routine...

SUSE CVE-2025-1734

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when receiving headers from HTTP server, the headers missing a colon : are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers...

CVE-2025-30074

Alludo Parallels Desktop before 19.4.2 and 20.x before 20.2.2 for macOS on Intel platforms allows privilege escalation to root via the VM creation routine...

CVE-2025-30074

Alludo Parallels Desktop before 19.4.2 and 20.x before 20.2.2 for macOS on Intel platforms allows privilege escalation to root via the VM creation routine...

CVE-2025-30074

Alludo Parallels Desktop for macOS (Intel) is affected by CVE-2025-30074. The vulnerability, described as a privilege escalation to root via the VM creation routine, affects versions prior to 19.4.2 and 20.x prior to 20.2.2. The root cause is exposed in the VM creation flow, allowing local attack...

CVE-2025-26875

creationtimestamp| type| source ---|---|--- 2025-03-15 23:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114169120894617970 2025-03-16 02:09:48+00:00| seen| https://t.me/cvedetector/20390 2025-03-16 11:00:06+00:00| seen|...

GHSA-RWP7-7VC6-8477

creationtimestamp| type| source ---|---|--- 2025-03-14 18:23:01+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pding2d 2025-04-04 18:18:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114281067875557615 2025-04-04 18:18:29+00:00| seen|...

SUSE CVE-2025-24201

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4...

CVE-2025-22870 vulnerabilities

Vulnerabilities for packages: glab, thanos-operator, cass-operator, promxy, mongo-tools, terraform-provider-kubernetes, opentelemetry-operator, k9s, fulcio, crossplane-provider-aws-lambda, cloudnative-pg, cni-plugins, flux-helm-controller, flux-kustomize-controller,...

CVE-2025-20145

creationtimestamp| type| source ---|---|--- 2025-03-12 18:49:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114150955258795716 2025-03-12 19:25:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk7cpu3z2526 2025-03-12 20:23:11+00:00| seen|...

CVE-2025-27867

creationtimestamp| type| source ---|---|--- 2025-03-12 17:10:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lk735oc7vx26 2025-03-12 17:59:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114150759111212347 2025-03-12 18:00:03+00:00| seen|...

The vulnerability of the MFlash secure data exchange platform lies in the lack of mechanisms for neutralizing elements related to CSV files, allowing attackers to execute arbitrary commands.

The vulnerability of the MFlash secure messaging platform is related to the lack of mechanisms for neutralizing elements related to CSV files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the MFlash secure data exchange platform lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the MFlash secure messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the administration panel by injecting specially crafted HTML code...

The vulnerability of the MFlash secure data exchange platform lies in its insufficient authentication attempt limitation, which allows a perpetrator to gain unauthorized access to the platform.

The vulnerability of the MFlash secure messaging platform is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the platform...

CVE-2025-27773

creationtimestamp| type| source ---|---|--- 2025-03-11 19:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114145527842239250 2025-03-11 20:21:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7223 2025-03-11 20:46:20+00:00| seen|...

DEBIAN-CVE-2025-24201

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4...

CVE-2025-24201

CVE-2025-24201 is a WebKit/WebKitGTK issue described in connected advisories as an out-of-bounds write that allowed breaking out of the Web Content sandbox. Root cause: out-of-bounds write in WebKit. Impact: potential sandbox breakout affecting Apple WebKit-based products (Safari, iOS/iPadOS 18.x...

CVE-2025-24035

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:40:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114145022545782390 2025-03-11 17:48:34+00:00| seen|...

CVE-2025-24045

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:40:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114145022545782390 2025-03-11 17:48:34+00:00| seen|...

CVE-2025-26645

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:23:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144954235534498 2025-03-11 17:40:22+00:00| seen|...