CVE-2025-33093

creationtimestamp| type| source ---|---|--- 2025-05-07 11:22:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15290 2025-05-07 12:21:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114466521491649706 2025-05-07 12:26:34+00:00| seen|...

CVE-2025-25014

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints...

CVE-2025-25014

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints...

CVE-2025-25014 Kibana arbitrary code execution via prototype pollution

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints...

CVE-2025-25014 Kibana arbitrary code execution via prototype pollution

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints...

CVE-2025-25014

KIBANA: CVE-2025-25014 is a prototype-pollution vulnerability in Kibana that enables arbitrary code execution via crafted HTTP requests to the Machine Learning or Reporting endpoints. Public details indicate exploitation is possible remotely over the network with low complexity and requires high ...

PT-2025-19890 · Kibana · Kibana

Name of the Vulnerable Software and Affected Versions: Kibana versions 8.3.0 through 8.17.5 Kibana version 8.18.0 Kibana version 9.0.0 Description: A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints...

CVE-2025-27921

creationtimestamp| type| source ---|---|--- 2025-05-05 20:03:54+00:00| seen| https://t.me/cvedetector/24474 2025-05-13 08:02:21+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3lozzh2lpaf2h 2025-05-13 14:46:13+00:00| seen| https://poliverso.org/objects/0477a01e-47e8df00-879faa5b2ea09852...

MicroDicom DICOM Viewer

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information, cause memory corruption, and execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

The vulnerability of the Cisco Nexus Dashboard, a control panel for analyzing and automating cloud-based data center operations, allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Cisco Nexus Dashboard, a control panel for analyzing and automating cloud-based data center operations, is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2025-4091

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn33gwwd2l 2025-04-29 16:49:45+00:00| seen| https://t.me/cvedetector/24002 2026-04-13 17:55:16+00:00| seen| Telegram/Rk7hMmIKYATXlhQfFOdK5MJxTVeQfOKjkNlqS7PgiJwldc...

CVE-2025-23376

Dell PowerProtect Data Manager Reporting, versions 19.16, 19.17, 19.18, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

CVE-2025-23375

Dell PowerProtect Data Manager Reporting, versions 19.17, contains an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-23375

Dell PowerProtect Data Manager Reporting, versions 19.17, contains an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-23377

Dell PowerProtect Data Manager Reporting, versions 19.17, 19.18 contains an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs...

CVE-2025-23377

Dell PowerProtect Data Manager Reporting, versions 19.17, 19.18 contains an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs...

Dell PowerProtect Data Manager Reporting 安全漏洞

Dell PowerProtect Data Manager Reporting is a data protection management software. An information disclosure vulnerability exists in Dell PowerProtect Data Manager Reporting, which arises from the program's failure to properly handle template input and can be exploited by an attacker to obtain...

Dell PowerProtect Data Manager Reporting 安全漏洞

Dell PowerProtect Data Manager Reporting is a data protection management software. An elevation of privilege vulnerability exists in Dell PowerProtect Data Manager Reporting, which can be exploited by an attacker to gain elevated privileges because the program fails to properly restrict API...

Dell PowerProtect Data Manager Reporting 安全漏洞

Dell PowerProtect Data Manager Reporting is a data protection management software. Dell PowerProtect Data Manager Reporting suffers from an improper escape vulnerability that stems from the program's failure to properly process output, no details of the vulnerability are available at this time...

Fedora 41 : java-17-openjdk (2025-22226bdb44)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-22226bdb44 advisory. April 2025 CPU Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...