CVE-2025-26902

creationtimestamp| type| source ---|---|--- 2025-04-09 19:48:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11145 2025-04-09 23:38:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmg5uwdtkp2v...

CVE-2024-36246

creationtimestamp| type| source ---|---|--- 2025-04-08 04:46:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10842 2025-04-08 05:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmbr6vzdhz2c...

CVE-2024-11071

creationtimestamp| type| source ---|---|--- 2025-04-07 07:17:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm7g64cshh2z 2025-04-07 07:48:48+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114295578822521194 2025-04-07 11:12:44+00:00| seen|...

CVE-2025-30155 Tuleap does not enforce read permissions on parent trackers in the REST API

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce read permissions on parent trackers in the REST API. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742392651 and Tuleap Enterprise Edition 16.5-5 and 16.4-8...

Unspecified vulnerability in Lunary (CNVD-2025-06936)

Lunary is Lunary open source a production toolkit for LLM . Lunary afc5df4 version of a security vulnerability , the vulnerability stems from a flaw in the permission checking mechanism , an attacker can use this vulnerability to cause unauthorized access to sensitive endpoints...

Malicious code in cryptomus-aurora-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db5768718bc2c708ec27865d8e381f97ca5fb81b191a946bc786bb0350aaec26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-24987

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 18:42:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7214 2025-03-11 20:06:15+00:00| seen|...

CVE-2021-37787

creationtimestamp| type| source ---|---|--- 2025-03-08 04:00:07+00:00| published-proof-of-concept| Telegram/WK-d7rHew0RoUjunO6vRsF762k6XwiwPjLRMSoANXZ7zahs 2025-03-11 17:39:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7183 2025-03-20 21:02:03+00:00| seen|...

CVE-2025-27402

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protections on tracker fields administrative operations. An attacker could use this vulnerability to trick victims into removing or updating tracker fields. This vulnerability i...

Linux Distros Unpatched Vulnerability : CVE-2023-4235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decodedeliverreport function during the SMS decoding...

CVE-2025-27421

creationtimestamp| type| source ---|---|--- 2025-03-03 16:30:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6226 2025-03-03 19:44:01+00:00| seen| https://t.me/cvedetector/19375 2025-08-19 13:26:46+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

MAL-2025-1647 Malicious code in figma-plugins-and-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 250144845a9dd4a7a0bea8a44c06f50652890d4ab2f0fb860bb51a5a14ea1a54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in erc20-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1318f067a3c4a722bc3d70af3c94d47696dc695c07dafc5cac772db0e1b20fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-0424

creationtimestamp| type| source ---|---|--- 2025-02-18 08:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligt24raei2y 2025-02-18 08:41:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4759 2025-02-18 10:57:37+00:00| seen| https://t.me/cvedetector/18301...

CVE-2024-12763

creationtimestamp| type| source ---|---|--- 2025-02-11 02:17:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrj6jqa27...

CVE-2024-45561

creationtimestamp| type| source ---|---|--- 2025-02-03 17:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc2b4zi7c2j...

CVE-2024-54549

creationtimestamp| type| source ---|---|--- 2025-01-27 22:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxrbbw3k2w 2025-01-30 19:19:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3517...

Malicious code in bindbc-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3969ce36d361753fe46f849a0dba26b4548e7c90bec80c86390c47bb429ec9bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-24354

creationtimestamp| type| source ---|---|--- 2025-01-27 17:29:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113901499013466426 2025-01-27 18:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkd5zq6i2i 2025-01-27 20:11:18+00:00| seen|...

Malicious code in casier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08fbcdfa482a4508e9f9c2f90db55d75e512d0876a2465d216815c469f07fe52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...