CVE-2025-3569

Affected software: JamesZBL/code-projects db-hospital-drug 1.0. The vulnerability resides in ShiroConfig.java and involves improper authorization. Exploitation is described as possible remotely; the exploit has been publicly disclosed. Documented impact is limited to authorization control, with n...

Medium: ruby3.2

Issue Overview: In the URI gem before 1.0.3 for Ruby, the URI handling methods URI.join, URImerge, URI+ have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host. CVE-2025-27221 Affected Packages: ruby3.2 Issue Correction: Run dnf update...

CVE-2025-3542

creationtimestamp| type| source ---|---|--- 2025-04-13 23:52:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11570 2025-04-14 02:17:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmqioi4o4m2b 2025-04-14 02:30:17+00:00| published-proof-of-concept|...

CVE-2022-46582

creationtimestamp| type| source ---|---|--- 2025-04-11 22:51:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11498...

CVE-2025-21597

An Improper Check for Unusual or Exceptional Conditions vulnerability in routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, logically adjacent BGP peer to cause Denial of Service DoS. On all Junos OS and Junos OS Evolved platforms, when BGP...

CVE-2025-0121

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it...

CVE-2025-0126 PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login

When configured using SAML, a session fixation vulnerability in the GlobalProtect™ login enables an attacker to impersonate a legitimate authorized user and perform actions as that GlobalProtect user. This requires the legitimate user to first click on a malicious link provided by the attacker. T...

CVE-2022-4368

creationtimestamp| type| source ---|---|--- 2025-04-09 18:48:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11138...

CVE-2025-21191

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-05-19 23:03:00+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkokz2bns24...

CVE-2025-26686

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-09 07:18:22+00:00| seen| https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb 2025-04-09 09:10:24+00:00| seen|...

CVE-2025-22458

DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated attacker to escalate to System...

Microsoft Windows NTFS 缓冲区错误漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-healing, and logging capabilities. A buffer error vulnerability exists in Microsoft Windows NTFS. The following products and editions are affected:Windows 10 Version...

CVE-2025-32414

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters...

CVE-2025-3266

A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Affected by this issue is some unknown functionality of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to stack-based buffer overflow. The attack may be launch...

CVE-2025-32218

Missing Authorization vulnerability in RealMag777 TableOn posts-table-filterable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TableOn: from n/a through = 1.0.5.1...

CVE-2022-47105

creationtimestamp| type| source ---|---|--- 2025-04-03 18:35:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10308...

CVE-2022-45748

creationtimestamp| type| source ---|---|--- 2025-04-03 15:34:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10246...

CVE-2022-4017

creationtimestamp| type| source ---|---|--- 2025-04-02 15:33:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10095...

CVE-2025-3071

creationtimestamp| type| source ---|---|--- 2025-04-02 03:01:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llsfizjoux2k 2025-04-02 04:07:02+00:00| seen| https://t.me/cvedetector/21833 2025-04-08 16:14:25+00:00| seen|...

PT-2026-48232

Name of the Vulnerable Software and Affected Versions image-size versions 1.1.0 through 1.2.0 image-size versions 2.0.0 through 2.0.1 Description A denial of service issue exists when processing specially crafted images with zero-sized boxes. Remote attackers can cause an application hang by...