CVE-2025-4843

creationtimestamp| type| source ---|---|--- 2025-05-18 00:39:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfszc5tzab2 2025-05-18 01:13:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvqjddh24...

CVE-2024-13965

creationtimestamp| type| source ---|---|--- 2025-05-17 21:07:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfh7bot3p2e...

CVE-2024-8397

The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not properly sanitize and escape the IP headers when logging them, allowing visitors to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the 'Consent report' page and the malicious...

CVE-2025-4389

creationtimestamp| type| source ---|---|--- 2025-05-17 05:38:13+00:00| seen| https://bsky.app/profile/potato.software/post/3lpdtb2d2hl2d 2025-05-17 06:43:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpdwv2zzu72e 2025-05-17 17:01:23+00:00| seen|...

CVE-2025-26086

creationtimestamp| type| source ---|---|--- 2025-05-17 04:43:07+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114521341008289755 2025-05-18 18:08:07+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3lphnmuxh722c...

OSV-2025-374 Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=418036603 Crash type: Use-of-uninitialized-value Crash state: pcpp::SomeIpSdEntry::SomeIpSdEntry pcpp::SomeIpSdLayer::getEntries readParsedPacket...

OSV-2025-373 Heap-use-after-free in aiMesh::~aiMesh

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=417905428 Crash type: Heap-use-after-free READ 8 Crash state: aiMesh::aiMesh aiScene::aiScene Assimp::BaseProcess::ExecuteOnScene...

firefox -- out-of-bounds read/write

[email protected] reports: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...

Beware! A threat actor could steal the titles of your private (and draft) WordPress posts with this new vulnerability!

As of today, almost a billion sites have been built using WordPress, powering businesses and organizations of all sizes. That makes any newly discovered vulnerability especially concerning—like the one recently found and reported by Imperva researchers, which could affect any WordPress site. In...

CVE-2025-2247

creationtimestamp| type| source ---|---|--- 2025-05-16 20:34:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16752 2025-10-16 21:02:44+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrmh6vg2a...

CVE-2025-39491

creationtimestamp| type| source ---|---|--- 2025-05-16 18:37:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpcodolbbh2t...

CVE-2025-47794

creationtimestamp| type| source ---|---|--- 2025-05-16 15:16:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114518167613475040...

GHSA-9H3W-F3H4-QQRH

creationtimestamp| type| source ---|---|--- 2025-05-16 14:39:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16692 2025-05-16 15:17:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114518172966589726...

CVE-2025-4772

creationtimestamp| type| source ---|---|--- 2025-05-16 12:34:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16679 2025-05-16 13:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpc3nyc2xl22...

CVE-2025-3834

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report...

Ivanti Endpoint Manager Mobile exploit chain exploited in the wild

On May 13, 2025, Ivanti disclosed an exploited in the wild exploit chain, comprising of two new vulnerabilities affecting Ivanti Endpoint Manager Mobile EPMM: CVE-2025-4427 and CVE-2025-4428. Ivanti EPMM is an enterprise-focused software suite for IT teams to manage mobile devices, applications,...

CVE-2025-4679

creationtimestamp| type| source ---|---|--- 2025-05-16 09:34:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16667 2025-05-16 12:29:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114517512101338293 2025-05-16 13:03:16+00:00| seen|...

CVE-2025-4766

creationtimestamp| type| source ---|---|--- 2025-05-16 09:34:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16666 2025-05-16 13:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpc3ny6goq2h...

CVE-2025-4693

creationtimestamp| type| source ---|---|--- 2025-05-16 06:14:31+00:00| seen| https://bsky.app/profile/silby.bsky.social/post/3lpbesz3np225...

CVE-2025-47809

creationtimestamp| type| source ---|---|--- 2025-05-16 01:34:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16595 2025-05-16 02:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpaypftjsr2o 2025-08-14 10:00:00+00:00| seen|...