CVE-2025-2101

creationtimestamp| type| source ---|---|--- 2025-04-26 09:08:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13576 2025-04-26 11:29:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnpn4367a72b 2025-04-26 11:30:37+00:00| seen|...

CVE-2025-28020

TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter...

OSV-2025-300 Negative-size-param in recurse_update_offsets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=413078692 Crash type: Negative-size-param Crash state: recurseupdateoffsets match pcre2match8...

OSV-2025-298 Heap-buffer-overflow in i18n::phonenumbers::UnicodeText::const_iterator::operator--

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=413161357 Crash type: Heap-buffer-overflow READ 1 Crash state: i18n::phonenumbers::UnicodeText::constiterator::operator-- i18n::phonenumbers::UnicodeString::tempSubString...

PT-2025-21904 · Git +1 · Pcre2

Name of the Vulnerable Software and Affected Versions: pcre2 affected versions not specified Description: The software is susceptible to a negative-size-param issue. The crash state involves the recurse update offsets and match functions, ultimately leading to a crash within the pcre2 match 8...

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

CVE-2025-32979

creationtimestamp| type| source ---|---|--- 2025-04-25 21:08:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13541 2025-04-25 23:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnoedfju7w2j 2025-04-26 01:52:35+00:00| seen| https://t.me/cvedetector/23789 2025-04-28...

GHSA-34G7-PG9J-PXGP Moodle allows IDOR when accessing the cohorts report

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

Incorrect Authorization

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Incorrect Authorization via the cohorts report. An attacker can access unauthorized cohort data by exploiting insufficient access control checks. Remediation Upgrade moodle/moodle to version 4.1.18,...

CVE-2025-3634

creationtimestamp| type| source ---|---|--- 2025-04-25 15:25:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114399295811920995 2025-04-25 17:30:45+00:00| seen| https://t.me/cvedetector/23753 2025-04-25 19:35:04+00:00| seen|...

CVE-2025-3647 Moodle: idor when accessing the cohorts report

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

CVE-2025-3647 Moodle: idor when accessing the cohorts report

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

CVE-2025-2986

creationtimestamp| type| source ---|---|--- 2025-04-25 12:09:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13409 2025-04-25 13:19:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnncromcw42h 2025-04-25 15:00:29+00:00| seen| https://t.me/cvedetector/23750...

CVE-2025-3912

creationtimestamp| type| source ---|---|--- 2025-04-25 12:09:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13408 2025-04-25 13:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnncrofgdb2g 2025-04-25 15:00:28+00:00| seen| https://t.me/cvedetector/23749...

CVE-2025-2470

creationtimestamp| type| source ---|---|--- 2025-04-25 12:09:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13406 2025-04-25 13:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnncroikpk2a 2025-04-25 13:48:43+00:00| seen|...

GHSA-CPJ6-FHP6-MR6J

creationtimestamp| type| source ---|---|--- 2025-04-25 01:10:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13366 2025-04-25 03:30:33+00:00| published-proof-of-concept| Telegram/oGnFJdmXUCqYx0xYR0D8dpnhpl9VxD3P3IPRWVfgfpPSsY 2025-04-26 05:43:33+00:00| seen|...

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

CVE-2025-32982

NETSCOUT nGeniusONE prior to 6.4.0 b2350 is affected by a Broken Authorization Schema in the report module (CVE-2025-32982). The CVE details indicate a high-severity impact (CVSS 3.1: 7.5; Confidentiality impact H, Integrity/Availability none) due to an authorization flaw that could enable unauth...

PT-2025-17940 · Netscout · Ngeniusone

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue is related to a Broken Authorization Schema for the report module. This means that there is a flaw in how authorization is handled, potentially allowing unauthorized...