CVE-2025-47275

creationtimestamp| type| source ---|---|--- 2025-05-15 21:33:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16574 2025-05-15 21:55:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114514077067044674 2025-05-15 22:37:34+00:00| seen|...

GHSA-G98G-R7GF-2R25

creationtimestamp| type| source ---|---|--- 2025-05-15 21:33:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16574 2025-05-15 21:55:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114514077067044674...

CVE-2024-4665

creationtimestamp| type| source ---|---|--- 2025-05-15 20:33:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16557...

CVE-2025-47786 Emlog vulnerable to Stored Cross-site Scripting

Emlog is an open source website building system. Version 2.5.13 has a stored cross-site scripting vulnerability that allows any registered user to construct malicious JavaScript, inducing all website users to click. In /admin/comment.php, the parameter perpagenum is not validated and is directly...

CVE-2025-47786

CVE-2025-47786 affects Emlog 2.5.13. The vulnerability is a stored cross-site scripting issue in /admin/comment.php where the unvalidated parameter perpage_num is stored in the database (admin_commend_perpage_num) and the output is not filtered, allowing a registered user to inject JavaScript tha...

CVE-2025-48027

creationtimestamp| type| source ---|---|--- 2025-05-15 05:32:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16451 2025-05-15 06:57:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp6wrhohzj2l...

GHSA-PFWF-H6M3-63WF

creationtimestamp| type| source ---|---|--- 2025-05-14 23:21:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114508750783243761 2025-05-14 23:21:34+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lp65bpgnmm2e 2025-05-14 23:33:27+00:00| published-proof-of-concept|...

CVE-2025-4641

creationtimestamp| type| source ---|---|--- 2025-05-14 18:32:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16365 2025-05-16 06:47:52+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lpbgonpzzs23 2025-05-19 16:22:12+00:00| seen|...

DRUPAL-CONTRIB-2025-062

This module enables you to allow users to include a second authentication method in addition to password authentication. The module doesn't sufficiently prevent TFA from being bypassed when using the REST login routes. A new requirements check has been added to the status report so other...

GHSA-9G7F-JMC3-RRMF

creationtimestamp| type| source ---|---|--- 2025-05-14 15:26:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114506885070033703...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Airplay_Audio_Software_Development_Kit

EN | KR --- 📄 Overview This tool...

CVE-2025-47915

reserved but not needed...

Pre-School Enrollment System /admin/visitor-details.php File SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Status in file /admin/visitor-details.php. An...

CVE-2025-30325

creationtimestamp| type| source ---|---|--- 2025-05-13 18:11:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp32xcil5tj2 2025-05-13 18:31:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16196 2025-05-13 18:37:15+00:00| seen|...

CVE-2025-30400

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 17:19:20+00:00| seen| https://cyberplace.social/users/GossiTheDog/statuses/114501662977985052 2025-05-13 17:34:18+00:00| seen|...

CVE-2025-31235

creationtimestamp| type| source ---|---|--- 2025-05-13 13:30:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16112 2025-06-25 16:41:43+00:00| published-proof-of-concept| https://t.me/AfroHax/2901 2026-01-30 07:00:00+00:00| seen| https://projectzero.google/2026/01/sound-barrier-2.html...

kernel: usb: dwc3: core: Prevent USB core invalid event buffer address access

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an issue where the USB core could access an invalid event buffer address during runtime suspend, potentially causing SMMU faults and othe...

kernel: ext4: fix infinite loop when replaying fast_commit

In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying fastcommit When doing fastcommit replay an infinite loop may occur due to an uninitialized extentstatus struct. ext4extdetermineinserthole does not detect the replay and calls...

kernel: wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix response handling in iwlmvmsendrecoverycmd 1. The size of the response packet is not validated. 2. The response buffer is not freed. Resolve these issues by switching to iwlmvmsendcmdstatus, which handles...

kernel: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpievaluateobject may return AENOTFOUND failure, which would result in dereferencing buffer.pointer obj while being NULL. Although this case may be unrealisti...