CVE-2024-12778

CVE-2024-12778 affects the Aim project (aimhubio/aim) v3.25.0. The root cause is an absence of a limit on the number of metrics requested per call, which, together with a single-threaded server, allows excessive resource consumption and can render the web API unresponsive (DoS). Concretely, retri...

CVE-2024-13877

creationtimestamp| type| source ---|---|--- 2025-03-20 06:18:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8174 2025-03-20 09:02:11+00:00| seen| https://t.me/cvedetector/20693 2025-03-20 09:03:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomessz2s...

CVE-2025-27777

creationtimestamp| type| source ---|---|--- 2025-03-19 23:00:29+00:00| seen| https://t.me/cvedetector/20678 2025-03-19 23:33:40+00:00| published-proof-of-concept| Telegram/HMG4VIRM9m-XCFs0EcofkvAyhAqbRpFenRbXfQ1LU4Gb4E 2025-03-20 00:49:07+00:00| seen|...

CVE-2025-27782

creationtimestamp| type| source ---|---|--- 2025-03-19 23:00:21+00:00| seen| https://t.me/cvedetector/20672 2025-03-19 23:33:39+00:00| published-proof-of-concept| Telegram/e8K6ei2MJobaYeBw9lEyjrqpWhjWmsfq7ceAEPONUHatpcs 2025-03-20 00:49:11+00:00| seen|...

CVE-2025-27777

Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery SSRF in modeldownload.py line 195 in 3.2.7. The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself ...

CVE-2025-30258

In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."...

CVE-2025-29924

creationtimestamp| type| source ---|---|--- 2025-03-19 19:06:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114190659236671973 2025-03-19 20:00:51+00:00| published-proof-of-concept| Telegram/pKc-k4S4UpucBi-A8jZui2WxqHw-KLQAnPldAvhIPnjHqVQ 2025-03-19 20:18:15+00:00|...

CVE-2025-27018

creationtimestamp| type| source ---|---|--- 2025-03-19 09:49:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8037 2025-03-19 10:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkpysbitl52j 2025-03-19 12:08:28+00:00| seen|...

CVE-2025-24799

GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18...

CVE-2025-25040

CVE-2025-25040 affects HPE Aruba CX 9300 CX-9300 switches running AOS-CX. The issue is in port ACL enforcement on routed ports for egress traffic, allowing bypass of ACLs and potential unauthorized traffic flow. Affected: AOS-CX 10.14.xxxx (all patches) and 10.15.xxxx (10.15.1000 and below). Not ...

CVE-2025-30110

creationtimestamp| type| source ---|---|--- 2025-03-18 17:44:12+00:00| seen| https://t.me/cvedetector/20578 2025-03-18 18:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkobicrxkw26 2025-03-21 17:19:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8...

CVE-2025-1468

creationtimestamp| type| source ---|---|--- 2025-03-18 13:01:22+00:00| seen| Telegram/6cbUuW0XOy9-5cfzVYZy-1D70VP0VBBmnHLM6kTk1XKO28 2025-03-18 13:21:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114183639798780722 2025-03-18 13:33:35+00:00| seen| https://t.me/cvedetector/20563...

CVE-2025-29909

creationtimestamp| type| source ---|---|--- 2025-03-18 00:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114180582366575557...

GHSA-7G6G-9GJ4-8C68

creationtimestamp| type| source ---|---|--- 2025-03-18 00:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114180582366575557...

CVE-2025-2393

creationtimestamp| type| source ---|---|--- 2025-03-17 20:47:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7854 2025-03-17 23:19:58+00:00| seen| https://t.me/cvedetector/20521 2025-03-18 00:01:13+00:00| seen|...

CVE-2025-30143

creationtimestamp| type| source ---|---|--- 2025-03-17 19:08:48+00:00| seen| https://t.me/cvedetector/20497 2026-02-09 16:21:55+00:00| published-proof-of-concept| Telegram/LNPMNDynQXCIsbkCl9fjvEZCatVya5RS81gonm9JdgHk3n0...

CVE-2025-2359

creationtimestamp| type| source ---|---|--- 2025-03-17 03:47:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7732 2025-03-17 06:00:34+00:00| seen| Telegram/T5P5dhJ-YUTsDNwgiU3fYLnJYZsECQzoOgnKDykhIz6I4A 2025-03-17 07:25:47+00:00| seen| https://t.me/cvedetector/20431...

CVE-2025-2353

creationtimestamp| type| source ---|---|--- 2025-03-16 23:48:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7726 2025-03-17 02:00:30+00:00| seen| Telegram/YqMSErjvEsKL-oCuev1YlJDuVwLSfej0wtL6NkJ5YTzu-U 2025-03-17 02:24:43+00:00| seen| https://t.me/cvedetector/20424...

CVE-2025-2295

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

CVE-2024-55594

creationtimestamp| type| source ---|---|--- 2025-03-14 16:44:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7591 2025-03-14 18:04:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114162103566286961 2025-03-14 19:13:13+00:00| seen| https://t.me/cvedetector/20318...