CVE-2025-27929

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04 2025-04-15 22:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5o2a6ux2i 2025-04-15 22:55:54+00:00| seen|...

CVE-2025-27575

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04...

platinumequity.com Cross Site Scripting vulnerability OBB-4046293

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-32934

creationtimestamp| type| source ---|---|--- 2025-04-15 04:38:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmtaybzal52j 2025-04-15 07:24:11+00:00| seen| https://t.me/cvedetector/22913...

OSV-2025-280 Heap-buffer-overflow in Assimp::SceneCombiner::CopyScene

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410393968 Crash type: Heap-buffer-overflow READ Crash state: Assimp::SceneCombiner::CopyScene Assimp::Exporter::Export Assimp::Exporter::ExportToBlob...

📄 Rollback Rx Professional 12.8.0.0 NULL Pointer Dereference

Rollback Rx Professional version 12.8.0.0 suffers from a null pointer dereference in shieldm.sys. Title: Rollback Rx Professional 12.8.0.0 - "shieldm.sys" Null Pointer Dereference Author: Can Burak Dönmez Date: 14.04.2025 Vendor: https://horizondatasys.com Affected Version: 12.8.0.0 Tested: Win10...

CVE-2025-3565

creationtimestamp| type| source ---|---|--- 2025-04-14 17:10:47+00:00| seen| https://t.me/cvedetector/22849...

CERTFR-2025-ACT-015

creationtimestamp| type| source ---|---|--- 2025-04-14 12:21:25+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lmrkfn4af42l 2025-04-14 12:21:26+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114336286913520676 2025-04-14 15:58:37+00:00| seen|...

CVE-2025-3564

A vulnerability classified as problematic has been found in huanfenz/code-projects StudentManager up to 1.0. This affects an unknown part of the component Teacher String Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-3558

creationtimestamp| type| source ---|---|--- 2025-04-14 08:55:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11587 2025-04-14 12:33:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl32wo5o2h 2025-04-14 12:59:21+00:00| seen|...

OSV-2025-275 UNKNOWN READ in void std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::__cons

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410115359 Crash type: UNKNOWN READ Crash state: void std::1::vector::cons Poco::Net::NTLMCredentials::parseChallengeMessage Poco::Net::HTTPNTLMCredentials::createNTLMMessage...

db-hospital-drug 代码注入漏洞

db-hospital-drug is a hospital inventory management system by James Personal Developer. A code injection vulnerability exists in db-hospital-drug version 1.0, which stems from improper manipulation of the parameter content in the file ContentController.java, and could lead to a cross-site scripti...

PT-2025-16264 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability was reported, but the details are not available due to the candidate number being withdrawn by its CNA. No information is provided about the estimated number of potentially...

CVE-2025-32671

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John Weissberg Print Science Designer print-science-designer allows Path Traversal.This issue affects Print Science Designer: from n/a through = 1.3.155...

CVE-2025-32541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin WooCommerce Sales MIS Report woocommerce-mis-report allows Reflected XSS.This issue affects WooCommerce Sales MIS Report: from n/a through = 4.0.3...

CVE-2025-3531

creationtimestamp| type| source ---|---|--- 2025-04-13 05:52:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11555 2025-04-13 09:24:00+00:00| seen| https://t.me/cvedetector/22803 2025-04-13 10:18:06+00:00| seen|...

pierrebensusan.com Cross Site Scripting vulnerability OBB-4045404

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-1386- Query smuggling in ch-go library

Impact When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream. Patches If you are using ch-go library, we...

CVE-2025-2881

creationtimestamp| type| source ---|---|--- 2025-04-12 02:51:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11532 2025-04-12 05:42:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmlt6rccl42i 2025-04-12 06:39:52+00:00| seen|...

CVE-2025-32073

creationtimestamp| type| source ---|---|--- 2025-04-11 17:32:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114320523948394256 2025-04-11 19:43:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkrorrlqp2g 2025-04-11 20:38:26+00:00| seen| https://t.me/cvedetector/227...