OSV-2025-260 Heap-buffer-overflow in bfd_getb16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408254000 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetb16 nds32elfdo9pcrelreloc nds32elf9pcrelreloc...

CVE-2025-3304

creationtimestamp| type| source ---|---|--- 2025-04-05 22:37:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10619 2025-04-06 01:07:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm4ayjsdaw2r 2025-04-06 03:27:02+00:00| seen|...

CVE-2024-57835

creationtimestamp| type| source ---|---|--- 2025-04-05 16:39:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10606 2025-04-05 17:06:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm3g5j35yc2u 2025-04-05 19:05:42+00:00| seen| https://t.me/cvedetector/22194...

jst-belgium.be Cross Site Scripting vulnerability OBB-4042370

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cc-toys.com.hk Cross Site Scripting vulnerability OBB-4042366

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vpsmalaysia.com.my Open Redirect vulnerability OBB-4042355

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

en.runabergsfroer.se Cross Site Scripting vulnerability OBB-4042329

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

en.japantravel.com Cross Site Scripting vulnerability OBB-4042328

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-2544

creationtimestamp| type| source ---|---|--- 2025-04-05 02:36:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10592 2025-04-05 06:33:41+00:00| seen| https://t.me/cvedetector/22177...

meble-giete.com.pl Cross Site Scripting vulnerability OBB-4042316

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OSV-2025-258 Global-buffer-overflow in parseExtraField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408025088 Crash type: Global-buffer-overflow READ 1 Crash state: parseExtraField KZip::openArchive KArchive::open...

FreeBSD : Mozilla -- redirection to insecure site (f02e3c59-116c-11f0-8b2c-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f02e3c59-116c-11f0-8b2c-b42e991fc52e advisory. [email protected] reports: When using Alt-Svc, ALPN did not properly validate certificates when the...

Grafana -- DingDing contact points exposed in Grafana Alerting

Grafana Labs reports: An incident occurred where the DingDing alerting integration URL was inadvertently exposed to viewers due to a setting oversight, which we learned about through a bug bounty report. The CVSS 3.0 score for this vulnerability is 4.3 Medium...

CVE-2025-3267

creationtimestamp| type| source ---|---|--- 2025-04-04 20:36:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10546 2025-04-04 21:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llzd3oengu2i 2025-04-05 00:42:49+00:00| seen|...

GHSA-4FCV-W3QC-PPGG rust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch`

When a Some... value was passed to the properties argument of either of these functions, a use-after-free would result. In practice this would nearly always result in OpenSSL treating the properties as an empty string due to CString::drop's behavior. The maintainers thank quitbug for reporting th...

CVE-2025-32278

creationtimestamp| type| source ---|---|--- 2025-04-04 16:36:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10492 2025-04-04 17:07:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyvpylubc2x 2025-04-04 20:32:10+00:00| seen| https://t.me/cvedetector/22155...

CVE-2025-32280

creationtimestamp| type| source ---|---|--- 2025-04-04 16:36:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10491 2025-04-04 17:07:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyvpxxhlo2i 2025-04-04 20:32:14+00:00| seen| https://t.me/cvedetector/22156 2026-04-01...

CVE-2025-31480

creationtimestamp| type| source ---|---|--- 2025-04-04 15:36:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10472 2025-04-04 15:40:21+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llyqu4xlon2g 2025-04-04 16:02:27+00:00| seen|...

CVE-2025-3253

creationtimestamp| type| source ---|---|--- 2025-04-04 15:36:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10464 2025-04-04 17:07:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyvpybtmo2i 2025-04-04 20:32:03+00:00| seen|...

xpcrypt.com Cross Site Scripting vulnerability OBB-4042287

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...