CVE-2025-2111

The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1. This is due to missing or incorrect nonce validation on the 'custompluginsetoption' function. This makes it possible for unauthenticated attackers to update...

CVE-2025-1093

creationtimestamp| type| source ---|---|--- 2025-04-19 03:59:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12563 2025-04-19 04:08:55+00:00| seen| https://bsky.app/profile/potato.software/post/3ln5b7l2pg32b 2025-04-19 05:48:30+00:00| seen|...

CBL Mariner 2.0 Security Update: golang / msft-golang (CVE-2025-22871)

The version of golang / msft-golang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22871 advisory. - The net/http package improperly accepts a bare LF as a line terminator in chunked data...

CGA-4CRJ-QQPW-Q3GG

Bulletin has no description...

BIT-MEDIAWIKI-2025-32696 "reupload-own" restriction can be bypassed by reverting file

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/actions/RevertAction.Php, includes/api/ApiFileRevert.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1...

CVE-2025-1697

A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential...

CVE-2025-1697

HP Touchpoint Analytics Service on certain HP PC products is affected by a local privilege escalation in versions prior to 4.2.2439. The vulnerability could allow a local attacker to escalate privileges; HP is providing software updates to mitigate this issue. Affected component/version: HP Touch...

CVE-2025-1697 HP Touchpoint Analytics Service – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential...

CVE-2025-1697 HP Touchpoint Analytics Service – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential...

CGA-C4G6-CF3C-FM4M

Bulletin has no description...

Metasploit Wrap-Up 04/18/2025

Smaller Fetch Payloads This week, a significant enhancement was made to the already awesome fetch payload feature by our very own bwatters-r7. The improvement introduces a new option, PIPEFETCH, which optimizes the process by serving both the payload and the command to be executed simultaneously...

CVE-2025-2492

creationtimestamp| type| source ---|---|--- 2025-04-18 09:59:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12414 2025-04-18 11:15:19+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3ikwh2cfj2 2025-04-18 11:30:43+00:00|...

CGA-6VH9-G6V2-9F8W

Bulletin has no description...

BELL-CVE-2025-30693

Bulletin has no description...

BELL-CVE-2025-22025

Bulletin has no description...

Vulnerability fixed in Erlang/OTP SSH server

Erlang/OTP developers have fixed a vulnerability in Erlang OTP. The vulnerability is located in the SSH functionality of affected versions of Erlang/OTP. The vulnerability allows an unauthenticated remote malicious person to execute arbitrary code in context of the SSH deamon by sending prepared...

Debian: Security Advisory (DLA-4129-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cosign (SUSE-SU-2025:1333-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1333-1 advisory. - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to l...

Nautel VX Series 安全漏洞

Nautel VX Series is a series of series of compact solid-state FM transmitters from Nautel. A security vulnerability exists in Nautel VX Series transmitters VXSW6.4.0 and prior versions, which stems from a remote code execution vulnerability during firmware updates that could lead to the execution...

PT-2025-17316 · Ses · Ses

Name of the Vulnerable Software and Affected Versions: SES versions prior to 1.12.0 Description: The issue arises when using the SES and Compartment API to evaluate third-party code in an isolated environment. In versions prior to 1.12.0, top-level let, const, and class bindings in tags are...