CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

Frogy2.0 - An Automated External Reconnaissance And Attack Surface Management (ASM) Toolkit

Frogy 2.0 is an automated external reconnaissance and Attack Surface Management ASM toolkit designed to map out an organization's entire internet presence. It identifies assets, IP addresses, web applications, and other metadata across the public internet and then smartly prioritizes them with...

Exploit for Code Injection in Foxcms

CVE-2025-29306 - FoxCMS Remote Code Execution Exploit !Pytho...

NetScout nGeniusONE 安全漏洞

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE versions prior to 6.4.0 b2350 that stems from an authorization mode flaw in the reporting module...

CVE-2025-43864

creationtimestamp| type| source ---|---|--- 2025-04-24 14:55:06+00:00| published-proof-of-concept| https://github.com/remix-run/react-router/security/advisories/GHSA-f46r-rw29-r322 2025-04-25 01:10:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13367 2025-04-25...

CVE-2025-2543

creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13206 2025-04-24 13:03:54+00:00| seen| https://t.me/cvedetector/23666 2025-04-24 14:19:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkvnu3mu724...

CVE-2025-3761

creationtimestamp| type| source ---|---|--- 2025-04-24 07:19:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13192 2025-04-24 09:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkenug2qx2r 2025-04-24 09:48:18+00:00| seen|...

ALBEDO Telecom Net.Time - PTP/NTP clock

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

marwer.gr Cross Site Scripting vulnerability OBB-4048936

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Infinite loop condition in Amazon.IonDotnet

Summary Amazon.IonDotnet ion-dotnet is a .NET library with an implementation of the Ion data serialization format. An issue exists in Amazon.IonDotnet and the RawBinaryReader class where, under certain conditions, an actor could trigger an infinite loop condition. Impact When reading binary Ion...

Fedora 40 : rpki-client (2025-d5fdbedb7f)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d5fdbedb7f advisory. rpki-client 9.5 - rpki-client now includes arin.tal which is no longer legally encumbered. See https://www.arin.net/announcements/20250116-tal/ - rpki-client...

jobs.careerxperts.com Cross Site Scripting vulnerability OBB-4047584

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

isonewswire.com Cross Site Scripting vulnerability OBB-4047524

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-47112

7-Zip 22.01 is affected by CVE-2022-47112: it does not report an error for certain invalid xz files due to issues with stream flags and reserved bits. Some later versions are unaffected. Affected product: 7-Zip 22.01; root cause: inability to report errors for specific malformed xz inputs. Impact...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

From Cyber Security Incident Management to Cyber Security Crisis Management in the European Union

Incident management is a classical topic in cyber security. Recently, the European Union EU has started to consider also the relation between cyber security incidents and cyber security crises. These considerations and preparations, including those specified in the EU's new cyber security laws,...

CVE-2025-29513

creationtimestamp| type| source ---|---|--- 2025-04-18 18:58:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12526 2025-04-18 20:33:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrh7wj52c 2025-04-18 20:45:33+00:00| seen|...

Fortinet FortiAnalyzer Input Validation Error Vulnerability (CNVD-2025-12793)

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...

CVE-2025-32665

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:48+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325153799279 2025-04-17 18:24:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3dnfgi2h...

The vulnerability of the ns_resolv() function in the ConnMan connection driver allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the nsresolv function in the ConnMan connection driver is related to the improper generation of error reports when processing DNS responses. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...