CVE-2025-30159

Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby sites that use the snippet helper or $kirby-snippet method with a dynamic snippet name such as a snippet name that depends on request or user data. Sites that onl...

CVE-2024-47800

creationtimestamp| type| source ---|---|--- 2025-05-13 21:30:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16239 2025-05-13 22:08:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3hoe6x6x42...

CVE-2025-31215

The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-32972

Vulnerability summary (CVE-2025-32972) : XWiki is affected in versions 6.1-milestone-1 to before 15.10.12, 16.0.0-rc-1 to before 16.4.3, and 16.5.0-rc-1 to before 16.8.0-rc-1. The issue is in the script API of the LESS compiler where it incorrectly checks rights when invoking the cache cleaning A...

CVE-2025-3454

creationtimestamp| type| source ---|---|--- 2025-04-23 08:30:30+00:00| seen| https://bsky.app/profile/grafana.bsky.social/post/3lnhroytxvs2w 2025-04-23 10:38:14+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lnhytg4c222p 2025-04-26 10:03:20+00:00| seen|...

SolarWinds Web Help Desk Hardcoded Credential

SolarWinds Web Help Desk proof of concept hardcoded credential exploit that retrieves the 25 most recent tickets...

CVE-2025-3829

creationtimestamp| type| source ---|---|--- 2025-04-19 21:56:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114366860108376362 2025-04-20 17:02:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12618 2025-04-20 18:48:53+00:00| seen|...

CVE-2025-22062

In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in procsctpdoudpport We must serialize calls to sctpudpsockstop and sctpudpsockstart or risk a crash as syzbot reported: Oops: general protection fault, probably for non-canonical address...

CVE-2025-27791 Collabora Online Vulnerable to Arbitrary File Write

Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4, 23.05.19, and 22.05.25, there is a path traversal flaw in handling the CheckFileInfo BaseFileName field returned from WOPI servers. This allows for a file to be written anywhe...

CVE-2025-3362

creationtimestamp| type| source ---|---|--- 2025-04-08 02:40:16+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmbh4wlnal2h 2025-04-08 02:45:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10817 2025-04-08 03:48:16+00:00| seen|...

CVE-2022-49743

In the Linux kernel, the following vulnerability has been resolved: ovl: Use "buf" flexible array for memcpy destination The "buf" flexible array needs to be the memcpy destination to avoid false positive run-time warning from the recent FORTIFYSOURCE hardening: memcpy: detected field-spanning...

CVE-2025-24796

Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations...

CVE-2025-24989

creationtimestamp| type| source ---|---|--- 2025-02-19 22:21:30+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3liksqx4pw62m 2025-02-20 01:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114033695623711760 2025-02-20 02:16:44+00:00| seen|...

CVE-2025-25195 Zulip events can leak private channel names

Zulip is an open source team chat application. A weekly cron job added in 50256f48314250978f521ef439cafa704e056539 demotes channels to being "inactive" after they have not received traffic for 180 days. However, upon doing so, an event was sent to all users in the organization, not just users in...

CVE-2025-1227

creationtimestamp| type| source ---|---|--- 2025-02-12 21:01:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113992931422862541 2025-02-12 21:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz3tbwzgq2i 2025-02-12 23:07:44+00:00|...

CVE-2024-13456

creationtimestamp| type| source ---|---|--- 2025-02-12 09:43:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113990264091516755 2025-02-12 10:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwx2xoo72x 2025-02-12 11:11:17+00:00| seen|...

CVE-2024-57000

creationtimestamp| type| source ---|---|--- 2025-02-11 22:40:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113987656907693602 2025-02-11 23:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2urr2u2a 2025-02-12 01:08:19+00:00|...

SUSE-SU-2025:0404-1 Security update for rsync

This update for rsync fixes the following issues: - Bump rsync protocol version to 32 to show server is patched against recent vulnerabilities...

CVE-2021-39180

OpenOLAT is a web-based learning management system LMS. A path traversal vulnerability exists in versions prior to 15.3.18, 15.5.3, and 16.0.0. Using a specially prepared ZIP file, it is possible to overwrite any file that is writable by the application server user e.g. the tomcat user. Depending...

CVE-2022-24827

Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns A column that requires a client provided parameter, and a parameterized column of typ...