DejaVuzz: Disclosing Transient Execution Bugs with Dynamic Swappable Memory and Differential Information Flow Tracking Assisted Processor Fuzzing

Transient execution vulnerabilities have emerged as a critical threat to modern processors. Hardware fuzzing testing techniques have recently shown promising results in discovering transient execution bugs in large-scale out-of-order processor designs. However, their poor microarchitectural...

CVE-2025-46549

creationtimestamp| type| source ---|---|--- 2025-04-28 16:52:26+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-r9gv-qffm-xw6f 2025-04-29 21:13:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13928 2025-04-29 23:50:46+00:0...

CVE-2025-46348

creationtimestamp| type| source ---|---|--- 2025-04-28 16:51:05+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-wc9g-6j9w-hr95 2025-04-29 21:10:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114423300046150064 2025-04-29 21:13:32+00:00|...

CVE-2025-46614

creationtimestamp| type| source ---|---|--- 2025-04-28 16:11:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13700 2025-04-28 19:50:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvjzd4tqc2a 2025-04-28 19:54:58+00:00| seen| https://t.me/cvedetector/23919...

CVE-2025-4015

creationtimestamp| type| source ---|---|--- 2025-04-28 10:10:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13665 2025-04-28 13:13:30+00:00| seen| https://t.me/cvedetector/23894 2025-04-28 13:40:12+00:00| seen|...

CVE-2025-3965

creationtimestamp| type| source ---|---|--- 2025-04-27 10:10:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13613 2025-04-27 11:24:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lns563lrxvp2 2025-04-27...

CVE-2025-3962

creationtimestamp| type| source ---|---|--- 2025-04-27 07:09:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13606 2025-04-27 07:35:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnrqil2sr62d 2025-04-27 10:28:06+00:00| seen|...

CVE-2025-3955

creationtimestamp| type| source ---|---|--- 2025-04-27 01:08:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13589 2025-04-27 03:35:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd2zfoox2s 2025-04-27 04:37:18+00:00| seen|...

CVE-2025-3954

creationtimestamp| type| source ---|---|--- 2025-04-26 22:10:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13588 2025-04-26 23:35:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnqvnigal32l 2025-04-27 00:30:41+00:00| seen|...

CVE-2024-53636

creationtimestamp| type| source ---|---|--- 2025-04-26 15:08:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13578 2025-04-26 15:34:13+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnq2r6mzenm2 2025-04-26...

Pete Hegseth’s Signal Scandal Spirals Out of Control

Plus: Cybercriminals stole a record-breaking fortune from US residents and businesses in 2024, and Google performs its final flip-flop in its yearslong quest to kill tracking cookies...

BIT-GITLAB-2025-1908 Business Logic Errors in GitLab

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-3935

creationtimestamp| type| source ---|---|--- 2025-04-25 18:46:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114400087294337009 2025-04-25 19:07:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13499 2025-04-25 21:30:14+00:00| seen|...

CVE-2025-27293

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webparexapp Shipmozo Courier Tracking webparex allows Reflected XSS.This issue affects Shipmozo Courier Tracking: from n/a through = 1.0...

CVE-2025-46275

creationtimestamp| type| source ---|---|--- 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06 2025-04-24 23:09:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13362 2025-04-25 00:19:53+00:00| seen|...

CVE-2025-1908

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

UBUNTU-CVE-2025-1908

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-1908 Business Logic Errors in GitLab

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-1908 Business Logic Errors in GitLab

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-1908

GitLab CVE-2025-1908 affects GitLab EE/CE. The issue could allow an attacker to track users’ browsing activities, potentially enabling full account takeover. Affected versions are 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. Root-cause details and remediation/fix informatio...