PT-2025-17931 · Unknown · Filez Client

Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: An improper XML parsing issue was reported in the FileZ client, which could allow arbitrary file reads on the system if a crafted URL is visited by a local user. Recommendations: At th...

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

CVE-2025-25777

creationtimestamp| type| source ---|---|--- 2025-04-24 23:44:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnlv7psxpg2d 2025-04-25 00:47:54+00:00| seen| https://t.me/cvedetector/23707 2025-04-25 19:48:21+00:00| seen|...

vesilahti.fi Cross Site Scripting vulnerability OBB-4049113

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

xlmgokong88.com Cross Site Scripting vulnerability OBB-4049112

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Wordfence Intelligence Weekly WordPress Vulnerability Report (April 14, 2025 to April 20, 2025)

In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. Last week, there were 259 vulnerabilities disclosed in 222 WordPress...

cosmetr.com Cross Site Scripting vulnerability OBB-4049105

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure

As many as 159 CVE identifiers have been flagged as exploited in the wild in the first quarter of 2025, up from 151 in Q4 2024. "We continue to see vulnerabilities being exploited at a fast pace with 28.3% of vulnerabilities being exploited within 1-day of their CVE disclosure," VulnCheck said in...

CVE-2025-27820

creationtimestamp| type| source ---|---|--- 2025-04-24 12:06:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13216 2025-04-24 13:09:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114393098223959645 2025-04-24 14:16:47+00:00| seen|...

mikejonesdui.com Cross Site Scripting vulnerability OBB-4049088

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3300

creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13201 2025-04-24 13:03:42+00:00| seen| https://t.me/cvedetector/23658 2025-04-24 14:19:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkvntgnrw2d 2026-04-08...

meadowlands-river-inn.us-newyorkcity.com Cross Site Scripting vulnerability OBB-4049003

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mcgesund.de Cross Site Scripting vulnerability OBB-4048994

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

BELL-CVE-2025-21605

Bulletin has no description...

CVE-2025-3500

creationtimestamp| type| source ---|---|--- 2025-04-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-256/ 2025-04-25 05:05:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114396856500034471 2025-12-01 16:37:28+00:00| seen|...

CVE-2024-38541

creationtimestamp| type| source ---|---|--- 2025-04-24 02:01:18+00:00| seen| https://gist.github.com/somprasongd/7e70d4aeffa65e3b65b61db9baeb480f 2025-05-09 08:25:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15707...

PT-2025-18080 · Dell · Dell Powerprotect Data Manager Reporting

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager Reporting versions 19.17 through 19.18 Description: The issue is related to improper encoding or escaping of output, which could be exploited by an attacker with high privileges and local access to inject...

CVE-2025-46397

creationtimestamp| type| source ---|---|--- 2025-04-23 21:05:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13154 2025-04-24 00:02:03+00:00| published-proof-of-concept| Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0 2025-04-24 00:31:13+00:00| seen| https://t.me/cvedetector/23620...

CVE-2025-46398

creationtimestamp| type| source ---|---|--- 2025-04-23 21:05:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13153 2025-04-24 00:02:03+00:00| published-proof-of-concept| Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0 2025-04-24 00:31:14+00:00| seen| https://t.me/cvedetector/23621...

measurepress.com Cross Site Scripting vulnerability OBB-4048847

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...