CVE-2024-4665

creationtimestamp| type| source ---|---|--- 2025-05-15 20:33:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16557...

CVE-2025-47786 Emlog vulnerable to Stored Cross-site Scripting

Emlog is an open source website building system. Version 2.5.13 has a stored cross-site scripting vulnerability that allows any registered user to construct malicious JavaScript, inducing all website users to click. In /admin/comment.php, the parameter perpagenum is not validated and is directly...

CVE-2025-47786

CVE-2025-47786 affects Emlog 2.5.13. The vulnerability is a stored cross-site scripting issue in /admin/comment.php where the unvalidated parameter perpage_num is stored in the database (admin_commend_perpage_num) and the output is not filtered, allowing a registered user to inject JavaScript tha...

CVE-2025-48027

creationtimestamp| type| source ---|---|--- 2025-05-15 05:32:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16451 2025-05-15 06:57:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp6wrhohzj2l...

GHSA-PFWF-H6M3-63WF

creationtimestamp| type| source ---|---|--- 2025-05-14 23:21:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114508750783243761 2025-05-14 23:21:34+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lp65bpgnmm2e 2025-05-14 23:33:27+00:00| published-proof-of-concept|...

CVE-2025-4641

creationtimestamp| type| source ---|---|--- 2025-05-14 18:32:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16365 2025-05-16 06:47:52+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lpbgonpzzs23 2025-05-19 16:22:12+00:00| seen|...

DRUPAL-CONTRIB-2025-062

This module enables you to allow users to include a second authentication method in addition to password authentication. The module doesn't sufficiently prevent TFA from being bypassed when using the REST login routes. A new requirements check has been added to the status report so other...

GHSA-9G7F-JMC3-RRMF

creationtimestamp| type| source ---|---|--- 2025-05-14 15:26:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114506885070033703...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Airplay_Audio_Software_Development_Kit

EN | KR --- 📄 Overview This tool...

CVE-2025-47915

reserved but not needed...

Pre-School Enrollment System /admin/visitor-details.php File SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Status in file /admin/visitor-details.php. An...

CVE-2025-30325

creationtimestamp| type| source ---|---|--- 2025-05-13 18:11:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp32xcil5tj2 2025-05-13 18:31:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16196 2025-05-13 18:37:15+00:00| seen|...

CVE-2025-30400

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 17:19:20+00:00| seen| https://cyberplace.social/users/GossiTheDog/statuses/114501662977985052 2025-05-13 17:34:18+00:00| seen|...

CVE-2025-31235

creationtimestamp| type| source ---|---|--- 2025-05-13 13:30:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16112 2025-06-25 16:41:43+00:00| published-proof-of-concept| https://t.me/AfroHax/2901 2026-01-30 07:00:00+00:00| seen| https://projectzero.google/2026/01/sound-barrier-2.html...

kernel: usb: dwc3: core: Prevent USB core invalid event buffer address access

A flaw was found in the Linux kernel's USB dwc3 core. During runtime suspend, the USB core could attempt to access an invalid event buffer address. This issue, particularly affecting Exynos platforms, can lead to System Memory Management Unit SMMU faults and other memory-related problems,...

kernel: ext4: fix infinite loop when replaying fast_commit

In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying fastcommit When doing fastcommit replay an infinite loop may occur due to an uninitialized extentstatus struct. ext4extdetermineinserthole does not detect the replay and calls...

kernel: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpievaluateobject may return AENOTFOUND failure, which would result in dereferencing buffer.pointer obj while being NULL. Although this case may be unrealisti...

kernel: wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix response handling in iwlmvmsendrecoverycmd 1. The size of the response packet is not validated. 2. The response buffer is not freed. Resolve these issues by switching to iwlmvmsendcmdstatus, which handles...

CVE-2025-43010

creationtimestamp| type| source ---|---|--- 2025-05-13 01:32:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114497943894558300 2025-05-13 03:12:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lozjac4baw2l 2025-05-13 05:30:20+00:00| seen| https://t.me/cvedetector/251...

CVE-2025-46750

creationtimestamp| type| source ---|---|--- 2025-05-12 17:32:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114496055573801981 2025-05-12 18:24:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15940 2025-05-12 18:26:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15959...