FreeBSD : Mozilla -- redirection to insecure site (f02e3c59-116c-11f0-8b2c-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f02e3c59-116c-11f0-8b2c-b42e991fc52e advisory. [email protected] reports: When using Alt-Svc, ALPN did not properly validate certificates when the...

Grafana -- DingDing contact points exposed in Grafana Alerting

Grafana Labs reports: An incident occurred where the DingDing alerting integration URL was inadvertently exposed to viewers due to a setting oversight, which we learned about through a bug bounty report. The CVSS 3.0 score for this vulnerability is 4.3 Medium...

CVE-2025-3267

creationtimestamp| type| source ---|---|--- 2025-04-04 20:36:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10546 2025-04-04 21:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llzd3oengu2i 2025-04-05 00:42:49+00:00| seen|...

GHSA-4FCV-W3QC-PPGG rust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch`

When a Some... value was passed to the properties argument of either of these functions, a use-after-free would result. In practice this would nearly always result in OpenSSL treating the properties as an empty string due to CString::drop's behavior. The maintainers thank quitbug for reporting th...

CVE-2025-32278

creationtimestamp| type| source ---|---|--- 2025-04-04 16:36:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10492 2025-04-04 17:07:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyvpylubc2x 2025-04-04 20:32:10+00:00| seen| https://t.me/cvedetector/22155...

CVE-2025-32280

creationtimestamp| type| source ---|---|--- 2025-04-04 16:36:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10491 2025-04-04 17:07:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyvpxxhlo2i 2025-04-04 20:32:14+00:00| seen| https://t.me/cvedetector/22156 2026-04-01...

CVE-2025-31480

creationtimestamp| type| source ---|---|--- 2025-04-04 15:36:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10472 2025-04-04 15:40:21+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llyqu4xlon2g 2025-04-04 16:02:27+00:00| seen|...

CVE-2025-3253

creationtimestamp| type| source ---|---|--- 2025-04-04 15:36:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10464 2025-04-04 17:07:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyvpybtmo2i 2025-04-04 20:32:03+00:00| seen|...

xpcrypt.com Cross Site Scripting vulnerability OBB-4042287

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bhs-sonthofen.com Cross Site Scripting vulnerability OBB-4042286

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

give.lalanga.co.nz Cross Site Scripting vulnerability OBB-4042278

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gpex.es Cross Site Scripting vulnerability OBB-4042270

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Use-After-Free in `Md::fetch` and `Cipher::fetch`

When a Some... value was passed to the properties argument of either of these functions, a use-after-free would result. In practice this would nearly always result in OpenSSL treating the properties as an empty string due to CString::drop's behavior. The maintainers thank quitbug for reporting th...

RUSTSEC-2025-0022 Use-After-Free in `Md::fetch` and `Cipher::fetch`

When a Some... value was passed to the properties argument of either of these functions, a use-after-free would result. In practice this would nearly always result in OpenSSL treating the properties as an empty string due to CString::drop's behavior. The maintainers thank quitbug for reporting th...

fdnet.work Cross Site Scripting vulnerability OBB-4042252

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3236

creationtimestamp| type| source ---|---|--- 2025-04-04 09:35:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10420 2025-04-04 13:07:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyichoty62r 2025-04-04 14:40:21+00:00| seen|...

CVE-2024-13645

creationtimestamp| type| source ---|---|--- 2025-04-04 05:35:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10398 2025-04-04 06:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llxsohuaan2a 2025-04-04 07:48:28+00:00| seen|...

CVE-2024-13744

creationtimestamp| type| source ---|---|--- 2025-04-04 04:35:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10389 2025-04-04 07:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114278590468850131 2025-04-04 07:48:27+00:00| seen|...

CVE-2025-3198

creationtimestamp| type| source ---|---|--- 2025-04-04 01:35:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10375 2025-04-04 02:01:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114277225666768350 2025-04-04 02:01:21+00:00| seen|...

osttc.com Cross Site Scripting vulnerability OBB-4042242

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...