PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10692)

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from mishandling of specific requests. No detailed vulnerability details are provided at this time...

CVE-2025-3807

creationtimestamp| type| source ---|---|--- 2025-04-19 18:02:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12590 2025-04-19 21:50:03+00:00| seen| https://t.me/cvedetector/23391 2025-04-20 01:20:10+00:00| seen|...

CVE-2025-32434

creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12473 2025-04-18 16:27:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114359904676181462 2025-04-18 18:31:46+00:00| published-proof-of-concept|...

Designing a Reliable Lateral Movement Detector Using a Graph Foundation Model

Foundation models have recently emerged as a new paradigm in machine learning ML. These models are pre-trained on large and diverse datasets and can subsequently be applied to various downstream tasks with little or no retraining. This allows people without advanced ML expertise to build ML...

CVE-2025-31360

Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users...

CVE-2025-29648

creationtimestamp| type| source ---|---|--- 2025-04-16 19:56:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12147 2025-04-17 00:26:02+00:00| seen| https://t.me/cvedetector/23185 2025-04-17 16:34:28+00:00| seen|...

CVE-2025-23135

The CVE-2025-23135 issue is in the Linux kernel for RISC-V KVM teardown. The root cause is an ordering flaw during module removal: aia_exit is invoked before kvm_exit, which can leave IRQ state inconsistent (percpu IRQ 31 still enabled) and prevent the KVM module from re-insertion. The published ...

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from mishandling of specific requests. No detailed vulnerability details are provided at this time...

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP software. A buffer overflow vulnerability exists in PCMan FTP Server that stems from a failure to properly validate input when processing a specific request. No detailed vulnerability details are provided at this time...

TOTOLINK A3700R 安全漏洞

The TOTOLINK A3700R is a wireless router that provides wireless network connectivity. The TOTOLINK A3700R suffers from an improper access control vulnerability that stems from mishandling of specific requests. No detailed vulnerability details are provided at this time...

CVE-2025-31360

Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users...

CVE-2024-01021

creationtimestamp| type| source ---|---|--- 2025-04-13 23:57:38+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqatnjjms2i 2025-04-13 23:58:30+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqav6wih22i 2025-04-14 00:03:30+00:00| seen|...

CVE-2025-3439

creationtimestamp| type| source ---|---|--- 2025-04-11 15:37:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkdyc6bpr2i 2025-04-11 15:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114320115017132840 2025-04-11 16:27:11+00:00| seen|...

CVE-2025-2469

An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.9.6, and 17.10 before 17.10.4. The runtime profiling data of a specific service was accessible to unauthenticated users...

UBUNTU-CVE-2024-38865

Improper neutralization of livestatus command delimiters in a specific endpoint within RestAPI of Checkmk prior to 2.2.0p39, 2.3.0p25, and 2.1.0p51 EOL allows arbitrary livestatus command execution. Exploitation requires the attacker to have a contact group assigned to their user account and for ...

CVE-2025-30649

An Improper Input Validation vulnerability in the syslog stream TCP transport of Juniper Networks Junos OS on MX240, MX480 and MX960 devices with MX-SPC3 Security Services Card allows an unauthenticated, network-based attacker, to send specific spoofed packets to cause a CPU Denial of Service DoS...

CVE-2025-21601

CVE-2025-21601 affects Juniper Networks Junos OS on SRX/EX/MX/QFX series. The issue is an Improper Following of Specification by Caller in web management components (J-Web, Captive Portal, 802.1X, JSC) that allows an unauthenticated, network-based attacker to force high CPU usage by sending genui...

CVE-2025-20946

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without user interaction...

Adobe Photoshop 安全漏洞

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. A heap buffer overflow vulnerability exists in Adobe Photoshop Desktops. The vulnerability is due to a failure to perform strict checksums on memory...

CVE-2025-27520

creationtimestamp| type| source ---|---|--- 2025-04-04 00:59:47+00:00| published-proof-of-concept| https://github.com/bentoml/BentoML/security/advisories/GHSA-33xw-247w-6hmc 2025-04-04 15:15:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114280346981280788 2025-04-04 15:15:09+00:00|...