85802 matches found
CVE-2025-4693
creationtimestamp| type| source ---|---|--- 2025-05-16 06:14:31+00:00| seen| https://bsky.app/profile/silby.bsky.social/post/3lpbesz3np225...
CVE-2025-47809
creationtimestamp| type| source ---|---|--- 2025-05-16 01:34:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16595 2025-05-16 02:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpaypftjsr2o 2025-08-14 10:00:00+00:00| seen|...
OSV-2025-371 Index-out-of-bounds in tcp_analyze_sequence_number
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=417518224 Crash type: Index-out-of-bounds Crash state: tcpanalyzesequencenumber dissecttcp calldissectorthroughhandle...
Apache Tomcat 10.1.0-M1 < 10.1.40 Multiple Vulnerabilities
The version of Apache Tomcat installed on the remote host is 9.0.0-M1 prior to 9.0.104, 10.1.0-M1 prior to 10.1.40 or 11.0.0-M1 prior to 11.0.6. It is, therefore, affected by multiple vulnerabilities : - A denial of service via invalid HTTP priority header. CVE-2025-31650 - A rewrite rule bypass...
PT-2025-21625 · Unknown · Phpgurukul Complaint Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0 Description: A critical vulnerability has been found in the PHPGurukul Complaint Management System, affecting unknown code of the file /admin/admin-profile.php. The manipulation of the...
GHSA-9FWJ-9MJF-RHJ3
creationtimestamp| type| source ---|---|--- 2025-05-15 21:33:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16574 2025-05-15 21:55:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114514077067044674...
GHSA-9WG9-93H9-J8CH
creationtimestamp| type| source ---|---|--- 2025-05-15 21:33:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16574 2025-05-15 21:55:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114514077067044674...
CVE-2024-8397
The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not properly sanitize and escape the IP headers when logging them, allowing visitors to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the 'Consent report' page and the malicious...
GO-2025-3671 ZITADEL Allows IdP Intent Token Reuse in github.com/zitadel/zitadel
ZITADEL Allows IdP Intent Token Reuse in github.com/zitadel/zitadel. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest ...
CVE-2025-30421
creationtimestamp| type| source ---|---|--- 2025-05-15 19:02:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpa7b72uk72e 2025-05-20 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-02...
Chromium: CVE-2025-4664 Insufficient policy enforcement in Loader
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware of reports that an exploit for CVE-2025-4664 exists in the wild...
CVE-2025-4698
creationtimestamp| type| source ---|---|--- 2025-05-15 15:03:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvi3l4m22...
CVE-2025-44182
creationtimestamp| type| source ---|---|--- 2025-05-15 15:03:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvh4hts2t...
CVE-2025-44180
creationtimestamp| type| source ---|---|--- 2025-05-15 15:03:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvgzb442n 2025-05-15 16:35:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16528...
CVE-2022-39109
creationtimestamp| type| source ---|---|--- 2025-05-15 14:35:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16507...
Wordfence Intelligence Weekly WordPress Vulnerability Report (May 5, 2025 to May 11, 2025)
In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. Last week, there were 224 vulnerabilities disclosed in 207 WordPress...
Authentication Bypass
github.com/openpubkey/opkssh is vulnerable to Authentication Bypass. The vulnerability is due to insufficient validation of JWS structures due to a flaw that allows specially crafted JWS tokens to bypass signature verification logic...
CVE-2025-30200
creationtimestamp| type| source ---|---|--- 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19...