CVE-2025-30162

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who use Gateway API for Ingress for some services and use LB-IPAM or BGP for LB Service implementation and use network policies to block egress traffic from workloads in a namespace to...

CVE-2025-25068

Mattermost versions 10.4.x = 10.4.2, 10.3.x = 10.3.3, 9.11.x = 9.11.8, 10.5.x = 10.5.0 fail to enforce MFA on plugin endpoints, which allows authenticated attackers to bypass MFA protections via API requests to plugin-specific routes...

ChuanhuChatGPT 安全漏洞

ChuanhuChatGPT is an application that provides a lightweight and easy-to-use web GUI and many additional features for a wide range of LLMs such as ChatGPT. A denial of service vulnerability exists in ChuanhuChatGPT version 20240918, which can be exploited by an attacker to cause the system to...

CVE-2025-2200

SQL injection vulnerability in the IcProgreso Innovación y Cualificación plugin. This vulnerability allows an attacker to obtain, update and delete data from the database by injecting an SQL query on the parameters user, id, idGroup, startdate and enddate in the endpoint...

CVE-2025-2320

creationtimestamp| type| source ---|---|--- 2025-03-14 23:06:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114163293011904157 2025-03-15 00:00:40+00:00| seen| Telegram/eCM4aHKdUiBHB9OwhsqXkdKvxoX4-6jxPypGuK3VSGlLfxU 2025-03-15 00:51:34+00:00| seen|...

AZL-58644 CVE-2025-24855 affecting package libxslt for versions less than 1.1.34-8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

CVE-2025-24201

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4...

CVE-2025-2117

creationtimestamp| type| source ---|---|--- 2025-03-09 08:38:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6961 2025-03-09 10:38:05+00:00| seen| Telegram/fsGqKV06VpR0bxSWxecnbwegtwThBTfbJKjUURkFe7hwZz6P 2025-03-09 10:59:53+00:00| seen|...

BIT-ELK-2025-25015 Kibana arbitrary code execution via prototype pollution

Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions = 8.15.0 and 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users tha...

SUSE CVE-2025-1922

Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-27657

creationtimestamp| type| source ---|---|--- 2025-03-06 00:00:23+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbo25g2e 2025-03-06 12:00:16+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzpjujf2u 2025-04-15 21:56:06+00:00| published-proof-of-concept...

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

CVE-2025-25015

CVE-2025-25015 – Kibana prototype pollution leading to arbitrary code execution . Affected: Kibana versions >= 8.15.0 and

Linux Distros Unpatched Vulnerability : CVE-2024-44966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: binfmtflat: Fix corruption when not offsetting data start Commit 04d82a6d0881 binfmtflat:...

CVE-2025-27425

creationtimestamp| type| source ---|---|--- 2025-03-04 14:06:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114104546018145703 2025-03-04 15:50:36+00:00| seen| https://t.me/cvedetector/19497 2025-08-19 13:26:45+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

CVE-2025-27278

creationtimestamp| type| source ---|---|--- 2025-03-03 18:03:36+00:00| seen| https://t.me/cvedetector/19360 2025-03-03 18:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljikjrveuh2i 2025-08-19 13:26:46+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

CVE-2025-1873

CVE-2025-1873 affects 101news (version 1.0) with an SQL injection vulnerability in admin/contactus.php, specifically via the pagetitle and pagedescription parameters. The CVE entry is corroborated by multiple sources (NVD, RH advisory, CVE list, CIRCL sighting, and other feeds) confirming a high-...

CVE-2024-55064

CVE-2024-55064 concerns EasyVirt DC NetScope versions

CVE-2024-38290

In Extreme Networks ExtremeCloud IQ Site Engine (XIQ-SE) versions prior to 24.2.11 , a server misconfiguration may allow user enumeration when specific conditions are met. This vulnerability leads to the exposure of sensitive information to an unauthorized actor. To remediate this issue, users ar...

UBUNTU-CVE-2022-49565

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fix unchecked MSR access error on HSW The fuzzer triggers the below trace. 7763.384369 unchecked MSR access error: WRMSR to 0x689 tried to write 0x1fffffff8101349e at rIP: 0xffffffff810704a4...