CVE-2024-43061

creationtimestamp| type| source ---|---|--- 2025-03-03 10:30:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6188 2025-03-03 10:45:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114098092985513084...

CVE-2025-20647

creationtimestamp| type| source ---|---|--- 2025-03-03 03:33:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6140 2025-03-03 04:39:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljh4yl5zcw2a 2025-03-03 05:30:02+00:00| seen|...

CVE-2025-25950

creationtimestamp| type| source ---|---|--- 2025-03-03 01:29:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6125 2025-03-03 02:58:44+00:00| seen| https://t.me/cvedetector/19281 2025-03-06 02:16:33+00:00| seen| Telegram/LnjyeAvwJZTh3Jc9tcYXlfWG8Jfh8HLDR5AhqYK-Ww9g5pT 2025-08-19...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.2.16, which stems from stored cross-site scripting in the adicionarstatusatendido.php endpoint...

Linux Distros Unpatched Vulnerability : CVE-2011-4462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote...

CVE-2025-1832

creationtimestamp| type| source ---|---|--- 2025-03-02 21:30:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6110 2025-03-02 22:47:41+00:00| seen| https://t.me/cvedetector/19268 2025-03-02 23:39:00+00:00| seen|...

CVE-2025-1817

creationtimestamp| type| source ---|---|--- 2025-03-02 15:32:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6098 2025-03-02 16:19:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljftnvgos42x 2025-03-02 16:56:29+00:00| seen|...

CVE-2025-1815

creationtimestamp| type| source ---|---|--- 2025-03-02 09:28:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114092126136384564 2025-03-02 12:33:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6094 2025-03-02 13:30:15+00:00| published-proof-of-concept|...

Advisory ROSA-SA-2025-2736

Software: ghostscript 9.27 OS: ROSA Virtualization 3.0 packageevrstring: ghostscript-9.27-13.0.1.rv30 CVE-ID: CVE-2024-33871 BDU-ID: 2024-05064 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability exists in the contrib/opvp/gdevopvp.c component of the Ghostscript processing, conversion, and document...

Advisory ROSA-SA-2025-2734

SOFTWARE: 389-ds-base 1.4.3.23. OS: ROSA Virtualization 3.0 packageevrstring: 389-ds-base-1.4.3.23-14.rv30 CVE-ID: CVE-2021-4091 BDU-ID: 2022-05559 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the 389 Directory Server's implementation of the 389 Directory Server lookup function is related to the...

CVE-2024-41778

creationtimestamp| type| source ---|---|--- 2025-03-01 14:28:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6076 2025-03-01 18:07:12+00:00| seen| https://t.me/cvedetector/19240 2025-03-02 11:46:59+00:00| seen| Telegram/8-pJA-wH6QIq7DP1TY-QDwJ0QCRtOJEYmjE30pepVlVq3Y3A 2025-08-19...

CVE-2025-1746

creationtimestamp| type| source ---|---|--- 2025-02-28 17:52:01+00:00| seen| https://t.me/cvedetector/19162 2025-03-02 11:44:23+00:00| seen| Telegram/v6Dq628O1KoMfKn9siFOADFiNdy7Bt0WK4C9hQRoXWSc7VlB 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c 2026-04-27...

CVE-2025-20049

creationtimestamp| type| source ---|---|--- 2025-02-28 17:27:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5937 2025-02-28 19:30:53+00:00| seen| Telegram/IBGJ8kZ9fJgVDBOQmiT-73KMxygXubCINORPAzZc5egT0 2025-02-28 19:32:18+00:00| seen| https://t.me/cvedetector/19165 2025-03-02 11:45:38+00:00...

GHSA-G839-X3P3-G5FM

creationtimestamp| type| source ---|---|--- 2025-02-28 13:27:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5901...

CVE-2025-22272

In the "/EPMUI/ModalDlgHandler.ashx?value=showReadonlyDlg" endpoint, it is possible to inject code in the "modalDlgMsgInternal" parameter via POST, which is then executed in the browser. The risk of exploiting vulnerability is reduced due to the required additional bypassing the...

CVE-2025-1572

creationtimestamp| type| source ---|---|--- 2025-02-28 08:26:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5848 2025-02-28 09:43:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lja4mfgbzi26 2025-02-28 11:10:39+00:00| seen| https://t.me/cvedetector/19147 2025-03-02...

CVE-2025-1744

creationtimestamp| type| source ---|---|--- 2025-02-28 05:00:35+00:00| published-proof-of-concept| Telegram/2j9dDfxEn4zzxplHxmSFVJVctTjIgqmnm6Kr1emkEpUxu8 2025-02-28 05:48:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7phjxwmy2y 2025-02-28 07:49:36+00:00| seen|...

SUSE CVE-2024-57980

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvcstatusinit function fails to allocate the inturb, it will free the dev-status pointer but doesn't reset the pointer to NULL. This results in the kfree call in...

SUSE CVE-2025-21707

In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional info. Zeroing the bitmask before parsi...

SUSE CVE-2025-21746

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash when enabling pass-through port When enabling a pass-through port an interrupt might come before psmouse driver binds to the pass-through port. However synaptics sub-driver tries to access psmouse...