CVE-2025-2251

creationtimestamp| type| source ---|---|--- 2025-04-07 17:04:09+00:00| seen| https://t.me/cvedetector/22306 2025-04-24 11:06:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13215 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:40+00:00| seen|...

The vulnerability of the webapi component of the cloud software for file storage, synchronization, and sharing with Synology Drive Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the webapi component of the cloud software for file storage, synchronization, and sharing with Synology Drive Server is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthoriz...

CVE-2024-12537

creationtimestamp| type| source ---|---|--- 2025-04-04 09:35:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10423 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

SUSE CVE-2024-42325

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc...

Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent

Cybersecurity researchers have disclosed details of a new vulnerability impacting Google's Quick Share data transfer utility for Windows that could be exploited to achieve a denial-of-service DoS or send arbitrary files to a target's device without their approval. The flaw, tracked as...

CVE-2024-42325

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc...

DEBIAN-CVE-2025-21925

In the Linux kernel, the following vulnerability has been resolved: llc: do not use skbget before devqueuexmit syzbot is able to crash hosts 1, using llc and devices not supporting IFFTXSKBSHARING. In this case, e1000 driver calls ethskbpad, while the skb is shared. Simply replace skbget by...

UBUNTU-CVE-2025-21925

In the Linux kernel, the following vulnerability has been resolved: llc: do not use skbget before devqueuexmit syzbot is able to crash hosts 1, using llc and devices not supporting IFFTXSKBSHARING. In this case, e1000 driver calls ethskbpad, while the skb is shared. Simply replace skbget by...

UBUNTU-CVE-2025-21963

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided mount parameter acdirmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies...

Ubuntu 24.04 LTS : Linux kernel (Low Latency) vulnerabilities (USN-7381-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7381-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...

PT-2025-14353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel's network stack has been identified, related to the reassembly of MCTP packets. The issue arises when the frag list used for reassembly is shared with...

CVE-2025-27149

creationtimestamp| type| source ---|---|--- 2025-03-31 19:12:33+00:00| seen| https://t.me/cvedetector/21624 2025-03-31 19:31:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9757 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10...

Analyzing open-source bootloaders: Finding vulnerabilities faster with AI

By leveraging Microsoft Security Copilot to expedite the vulnerability discovery process, Microsoft Threat Intelligence uncovered several vulnerabilities in multiple open-source bootloaders, impacting all operating systems relying on Unified Extensible Firmware Interface UEFI Secure Boot as well ...

CVE-2025-3027

creationtimestamp| type| source ---|---|--- 2025-03-31 11:31:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9635 2025-03-31 15:00:53+00:00| seen| https://t.me/cvedetector/21584 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:56+00:00| seen|...

CVE-2025-2976

creationtimestamp| type| source ---|---|--- 2025-03-31 09:09:17+00:00| seen| https://t.me/cvedetector/21556 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:57+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c...

CVE-2025-2974

creationtimestamp| type| source ---|---|--- 2025-03-31 07:28:39+00:00| seen| https://t.me/cvedetector/21539 2025-03-31 16:33:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9698 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10...

CVE-2025-3014

creationtimestamp| type| source ---|---|--- 2025-03-31 06:00:41+00:00| seen| Telegram/DCVbRdTqFrZ0rXrPZ-NREmPhb85qceJxgEhmh0x1cJAtg8 2025-03-31 07:28:37+00:00| seen| https://t.me/cvedetector/21536 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:57+00:00...

CVE-2025-2958

creationtimestamp| type| source ---|---|--- 2025-03-30 20:30:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9553 2025-03-30 23:00:47+00:00| published-proof-of-concept| Telegram/KlxscejhJMFm4BFG0cW1BTgEWIPLJcnvDyQRnMLz3uAoQ 2025-03-30 23:06:37+00:00| seen|...

CVE-2025-27574

Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only...

CVE-2025-27716

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in the file/folder listing process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered...