CVE-2025-4170

creationtimestamp| type| source ---|---|--- 2025-05-03 03:26:54+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loafepda7x42 2025-05-03 06:05:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loaob45lhh2h 2025-05-03...

CVE-2025-4192

creationtimestamp| type| source ---|---|--- 2025-05-02 02:01:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5q5clnv52h 2025-05-02 03:00:34+00:00| seen| Telegram/dufR84U9a76scHqcf4RtjpsIK8gAxB41Z85eReDtwxq4Bws 2025-05-02 05:04:10+00:00| exploited| https://t.me/cvedetector/24306...

CVE-2025-23174

creationtimestamp| type| source ---|---|--- 2025-04-21 17:01:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12707 2025-04-21 19:30:53+00:00| seen| Telegram/hzeboNNBaj7yZ1hOkqtr9xZOg402vowIgtzOJPP89RrSkNk 2025-04-21 19:49:33+00:00| seen| https://t.me/cvedetector/23448 2025-04-21...

CVE-2025-31420

creationtimestamp| type| source ---|---|--- 2025-04-04 13:35:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10443 2025-04-04 16:20:51+00:00| seen| https://t.me/cvedetector/22121 2025-04-07 05:09:22+00:00| seen|...

CVE-2024-3032

creationtimestamp| type| source ---|---|--- 2025-03-19 21:02:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lkr3emjbhx2e...

CVE-2025-27152

creationtimestamp| type| source ---|---|--- 2025-03-07 15:35:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6839 2025-03-07 17:01:02+00:00| seen| Telegram/GvPZHyEbeVxrI-IlIz9tH0tmbQ0NIgaQyLb0r6ME-4MX0o 2025-03-07 18:17:23+00:00| seen| https://t.me/cvedetector/19834...

CVE-2025-0953

creationtimestamp| type| source ---|---|--- 2025-02-22 13:22:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5023 2025-02-22 14:31:06+00:00| seen| Telegram/EQZhfPjzTeUTRrTJdTYdMWjCa2N3yzfrEBREWYjILbZYwQc 2025-02-22 15:52:46+00:00| seen|...

CVE-2024-28241 GlPI-Agent MSI package installation doesn't update folder security profile when using non default installation folder

The GLPI Agent is a generic management agent. Prior to version 1.7.2, a local user can modify GLPI-Agent code or used DLLs to modify agent logic and even gain higher privileges. Users should upgrade to GLPI-Agent 1.7.2 to receive a patch. As a workaround, use the default installation folder which...

GLPI 安全漏洞

GLPI is an open source IT and asset management software from an individual developer. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner...

How Strata Identity and Microsoft Entra ID solve identity challenges in mergers and acquisitions

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. Along with every merger and acquisition between two companies comes the need to combine and strengthen their IT infrastructure. In particular, there is an immediate and profound impa...

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2023-83656)

IBM QRadar SIEM is a solution from International Business Machines IBM that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...

CVE-2023-43041

IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID: 266808...

CVE-2023-43041

IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID: 266808...

Design/Logic Flaw

IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID: 266808...

CVE-2023-43041 IBM QRadar information disclosure

IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID: 266808...

CVE-2023-43041 IBM QRadar information disclosure

IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID: 266808...

CVE-2022-34352

IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. IBM X-Force ID: 230403...

Information disclosure

IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. IBM X-Force ID: 230403...

CVE-2022-34352 IBM QRadar information disclosure

IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. IBM X-Force ID: 230403...

URL Restriction Bypass

Description In attempting to fix a previous issue, the PATTERNUSERINFO regular expression was changed. This change introduced another way to bypass the URL allowlist by introducing non-alphanumeric characters into the user information part of the URL. Proof of Concept Run PlantUML with...