Parallels Desktop prl_disp_service Snapshots.xml Hard Link Privilege Escalation

Talos Vulnerability Report TALOS-2024-2124 Parallels Desktop prldispservice Snapshots.xml Hard Link Privilege Escalation June 3, 2025 CVE Number CVE-2024-54189 SUMMARY A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 build 55740...

Parallels Desktop prl_packer_inplace PVMP Unpack Directory Traversal Privilege Escalation

Talos Vulnerability Report TALOS-2025-2160 Parallels Desktop prlpackerinplace PVMP Unpack Directory Traversal Privilege Escalation June 3, 2025 CVE Number CVE-2025-31359 SUMMARY A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac...

CVE-2025-47585

creationtimestamp| type| source ---|---|--- 2025-06-02 20:37:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnmxts5orv2 2025-06-03 00:37:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqo2elu5gr2q...

GHSA-8CJ5-5RVV-WF4V

creationtimestamp| type| source ---|---|--- 2025-06-02 20:00:25+00:00| published-proof-of-concept| Telegram/M9ruxIqfssiRmufIiVDPBVG9309mAKgr9KyLQBBOZAkMKU...

CVE-2025-22157

creationtimestamp| type| source ---|---|--- 2025-06-02 17:04:01+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/17763 2025-06-02 17:04:29+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/114614853194971118 2025-06-02 17:04:30+00:00| seen|...

CVE-2025-5439

creationtimestamp| type| source ---|---|--- 2025-06-02 11:11:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmncyinzqa2...

CVE-2025-5436

creationtimestamp| type| source ---|---|--- 2025-06-02 08:59:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmfw3jypym2 2025-06-02 12:02:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqmq744xzr2a...

CVE-2025-5420

creationtimestamp| type| source ---|---|--- 2025-06-02 00:52:31+00:00| seen| https://bsky.app/profile/potato.software/post/3lqlkqvj5b52v 2025-06-02 01:03:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqller46bob2 2025-06-02...

NVIDIA cuobjdump ELF Section Parsing Integer Overflow Vulnerability

Talos Vulnerability Report TALOS-2025-2151 NVIDIA cuobjdump ELF Section Parsing Integer Overflow Vulnerability June 2, 2025 CVE Number CVE-2025-23247 SUMMARY An integer overflow vulnerability exists in the ELF Section Parsing functionality of NVIDIA cuobjdump 12.8.55. A specially crafted fatbin...

Catdoc utilities OLE Document Parser File Allocation Table 32-bit integer overflow vulnerability

Talos Vulnerability Report TALOS-2024-2131 Catdoc utilities OLE Document Parser File Allocation Table 32-bit integer overflow vulnerability June 2, 2025 CVE Number CVE-2024-52035 SUMMARY An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of...

CVE-2025-5409

creationtimestamp| type| source ---|---|--- 2025-05-31 17:13:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114603564224967709 2025-06-01 22:30:52+00:00| published-proof-of-concept| Telegram/59QW1O-7JtIhFv-RKnup6MDlRCCkwZK5QAQgzoPYi1FXic 2025-06-01 23:15:18+00:00| seen|...

CVE-2025-5380

creationtimestamp| type| source ---|---|--- 2025-05-31 14:21:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqhx23cfmuc2 2025-05-31 18:26:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqiepmvnxz2q...

CVE-2025-4607

creationtimestamp| type| source ---|---|--- 2025-05-31 07:12:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqh6zmkxrvd2 2025-05-31 09:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhgcyifyb2s...

BIT-MOODLE-2024-34000 moodle: stored XSS in lesson overview report via user ID number

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk...

CVE-2025-5364

creationtimestamp| type| source ---|---|--- 2025-05-31 02:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqgokcrgv52m...

OSV-2025-419 Security exception in org.apache.lucene.util.AttributeImpl.clone

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420955259 Crash type: Security exception Crash state: org.apache.lucene.util.AttributeImpl.clone org.apache.lucene.util.AttributeSource$State.clone org.apache.lucene.util.AttributeSource$State.clone...

PT-2025-25487 · Git +1 · Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: The software experiences a security exception during the cloning process within the org.apache.lucene.util.AttributeImpl and org.apache.lucene.util.AttributeSource$State classes. The...

PHPGurukul Daily Expense Tracker System Security Vulnerability

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter todate in the file...

CVE-2025-1479

creationtimestamp| type| source ---|---|--- 2025-05-30 22:18:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqgbajbbzd2s...

CVE-2025-48885

creationtimestamp| type| source ---|---|--- 2025-05-30 19:07:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfwicqbtge2...