CVE-2025-23515

CVE-2025-23515 corresponds to a Missing Authorization vulnerability in the WordPress plugin ts-tree, affecting ts-tree versions up to 0.1.1. The vulnerability is described as Arbitrary Content Deletion due to insufficient access control (Authenticated/Subscriber+ level). Public data confirms the ...

CVE-2025-1830

creationtimestamp| type| source ---|---|--- 2025-03-02 20:28:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6109 2025-03-02 22:47:43+00:00| seen| https://t.me/cvedetector/19270 2025-03-02 23:38:59+00:00| seen|...

CVE-2025-21739

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix use-after free in init error and remove paths devmblkcryptoprofileinit registers a cleanup handler to run when the associated platform- device is being released. For UFS, the crypto private data and pointers...

CVE-2022-49078

creationtimestamp| type| source ---|---|--- 2025-02-27 18:27:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5747...

Exploit for CVE-2025-1094

CVE-2025-1094: SQL Injection to RCE via WebSocket 🚀 This repo...

CVE-2025-21730

creationtimestamp| type| source ---|---|--- 2025-02-27 04:30:09+00:00| seen| https://t.me/cvedetector/18976 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-4095

creationtimestamp| type| source ---|---|--- 2025-02-26 16:24:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5525...

CVE-2022-49296

In the Linux kernel, the following vulnerability has been resolved: ceph: fix possible deadlock when holding Fwb to get inlinedata 1, mount with wsync. 2, create a file with ORDWR, and the request was sent to mds.0: cephatomicopen-- cephmdscdorequestopenc finishopenfile, dentry, cephopen--...

CVE-2022-49440

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Keep MSRRI set when calling RTAS RTAS runs in real mode MSRDR and MSRIR unset and in 32-bit big endian mode MSRSF,LE unset. The change in MSR is done in enterrtas in a relatively complex way, since the MSR value cou...

CVE-2021-47650

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: prevent the potentially use of null pointer There is one call trace that sndsocregistercard -sndsocbindcard-socinitpcmruntime -sndsocdaicompressnew-sndsocnewcompress. In the trace the 'codecdai' transfers from...

CVE-2022-49714

The CVE-2022-49714 item concerns a refcount leak in the Linux kernel’s irqchip/realtek-rtl code within map_interrupts. The root cause was that of_find_node_by_phandle() returned a node pointer with an incremented refcount and missing of_node_put() on all paths, including error paths. The fix is t...

CVE-2022-49429 RDMA/hfi1: Prevent panic when SDMA is disabled

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent panic when SDMA is disabled If the hfi1 module is loaded with HFI1CAPSDMA off, a call to hfi1writeiter will dereference a NULL pointer and panic. A typical stack frame is: sdmaselectuserengine hfi1...

CVE-2025-1576

creationtimestamp| type| source ---|---|--- 2025-02-23 05:20:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5082 2025-02-23 07:41:53+00:00| seen| https://t.me/cvedetector/18736 2025-02-23 08:12:52+00:00| seen|...

CVE-2024-5111

creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:44+00:00| seen| Telegram/d9UIilcKuN506FAPEIMUqoyFKXnGznSu9G4mWQINcHaW9iCX...

CVE-2024-2768

creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:25+00:00| seen| Telegram/hE1t5epaEAzRM6-15VVZ7xEVOefsy6lHeHEf-CBRH3dzVxN2...

CVE-2025-0425

Via the GUI of the "bestinformed Infoclient", a low-privileged user is by default able to change the server address of the "bestinformed Server" to which this client connects. This is dangerous as the "bestinformed Infoclient" runs with elevated permissions "nt authority\system". By changing the...

CVE-2023-43842

Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to alter user and administrator accounts credentials via HTTP POST request...

CVE-2022-31890

creationtimestamp| type| source ---|---|--- 2025-02-14 10:09:23+00:00| seen| Telegram/mcFehyru1ukqJfl1PK8agRWo8nUfFm76AcpFydgcLsHLH...

CVE-2025-26788

creationtimestamp| type| source ---|---|--- 2025-02-14 07:43:30+00:00| seen| https://infosec.exchange/users/cve/statuses/114001117806184646 2025-02-14 08:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4r6djxlw2g 2025-02-14 08:48:27+00:00| seen|...

CVE-2023-34149

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater...