CVE-2025-20242

A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise CCE could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this...

CVE-2025-4477

The ThreatSonar Anti-Ransomware from TeamT5 has a Privilege Escalation vulnerability, allowing remote attackers with intermediate privileges to escalate their privileges to highest administrator level through a specific API...

CVE-2025-37933

In the Linux kernel, the following vulnerability has been resolved: octeonep: Fix host hang issue during device reboot When the host loses heartbeat messages from the device, the driver calls the device-specific ndostop function, which frees the resources. If the driver is unloaded in this...

CVE-2025-4926

creationtimestamp| type| source ---|---|--- 2025-05-19 09:38:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16833 2025-05-19 13:13:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnjz3ux2s...

VMware Spring Framework < 5.3.43, 6.0.x < 6.0.28, 6.1.x < 6.1.20, 6.2.x < 6.2.7 Authorization Bypass Vulnerability - Linux

The VMware Spring Framework is prone to an authorization bypass vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fragments to Facts: Partial-Information Fragment Inference from LLMs

Large language models LLMs can leak sensitive training data through memorization and membership inference attacks. Prior work has primarily focused on strong adversarial assumptions, including attacker access to entire samples or long, ordered prefixes, leaving open the question of how vulnerable...

CVE-2025-4881

creationtimestamp| type| source ---|---|--- 2025-05-18 14:20:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphawalir4b2 2025-05-18 17:12:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lphkjxus5f2h...

TechniqueRAG: Retrieval Augmented Generation for Adversarial Technique Annotation in Cyber Threat Intelligence Text

Accurately identifying adversarial techniques in security texts is critical for effective cyber defense. However, existing methods face a fundamental trade-off: they either rely on generic models with limited domain precision or require resource-intensive pipelines that depend on large labeled...

CVE-2025-47793

Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a group or team. In Nextcloud Server prior to 30.0.2, 29.0.9, and 28.0.1, Nextcloud Enterprise Server prior to 30.0.2 and 29.0.9, and Nextcloud...

GHSA-Q568-2933-GCJQ

creationtimestamp| type| source ---|---|--- 2025-05-16 15:15:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114518165552832603 2025-05-16 15:16:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114518167613475040...

LLMs Unlock New Paths to Monetizing Exploits

We argue that Large language models LLMs will soon alter the economics of cyberattacks. Instead of attacking the most commonly used software and monetizing exploits by targeting the lowest common denominator among victims, LLMs enable adversaries to launch tailored attacks on a user-by-user basis...

CVE-2025-47292

creationtimestamp| type| source ---|---|--- 2025-05-14 11:02:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4twxknlqp2 2025-05-14 11:31:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16302 2025-05-14...

CVE-2025-30330

creationtimestamp| type| source ---|---|--- 2025-05-13 18:11:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp32wuo3gar2 2025-05-13 20:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eafh2ou2w 2025-05-13...

CVE-2024-36340

creationtimestamp| type| source ---|---|--- 2025-05-13 14:30:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16123 2025-05-13 15:38:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2rwgpccmz2 2025-05-13 17:13:08+00:00| seen|...

CVE-2025-40577

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16098 2025-05-13 10:48:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cmzo5rjk2 2025-05-13 10:52:38+00:00| seen|...

CVE-2025-40583

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16092 2025-05-13 10:48:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cmyg4m742 2025-05-13 10:52:44+00:00| seen|...

php: Filter bypass in filter_var (FILTER_VALIDATE_URL)

A flaw was found in PHP. An early return in the filtervar FILTERVALIDATEURL function results in invalid user information username + password part of URLs being treated as valid user information. This issue impacts users who expect only completely valid URLs to be returned by filtervar...

CVE-2025-31257

creationtimestamp| type| source ---|---|--- 2025-05-12 22:47:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loz2gacd3l22 2025-05-13 01:19:19+00:00| seen| https://t.me/cvedetector/25122 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-1...

CVE-2025-4525

creationtimestamp| type| source ---|---|--- 2025-05-10 23:27:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15916 2025-05-10 23:27:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lou3qi56mef2 2025-05-11...

CVE-2025-46812

creationtimestamp| type| source ---|---|--- 2025-05-08 19:48:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojmngd3y2 2025-05-08 20:23:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15617 2025-05-08...