PT-2025-87: Incorrect session expiration in Fastwel PLC web server

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability can be exploited by an attacker to gain unlimited access to a device by brute-forcing or compromising a session token. Vulnerability status: Confirmed ...

CVE-2025-54542

QuickCMS sends password and login via GET Request. This allows a local attacker with access to the victim's browser history to obtain the necessary credentials to log in as the user. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or...

Linux Distros Unpatched Vulnerability : CVE-2024-58059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix deadlock during uvcprobe If uvcprobe fails, it can end up calling...

Linux Distros Unpatched Vulnerability : CVE-2022-50058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vdpasimblk: set number of address spaces and virtqueue groups Commit bda324fd037a vdpasim:...

PT-2025-32767 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions affected versions not specified Description: A race condition exists in the Microsoft Graphics Component due to improper synchronization during concurrent execution using a shared resource. This allows an authorized...

Linux Distros Unpatched Vulnerability : CVE-2023-52493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffers Ensure read and write locks for the...

CVE-2025-42963

creationtimestamp| type| source ---|---|--- 2025-07-08 01:16:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114814969134379111 2025-07-16 17:11:07+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lu3vx5gtfk2k 2025-07-16 17:11:09+00:00| seen|...

PT-2025-28522 · Microsoft · Azure Monitor Agent

Name of the Vulnerable Software and Affected Versions: Azure Monitor Agent affected versions not specified Description: The issue is related to improper control of generation of code, also known as 'code injection', in Azure Monitor Agent. This allows an unauthorized attacker to execute code over...

编号撤回

AVTECH IP camera and others are products of AVTECH Corporation.AVTECH IP camera is a series of network security cameras.AVTECH DVR is a digital video recording host.AVTECH NVR is a network video recorder. This CVE number has been withdrawn...

CVE-2025-6503

creationtimestamp| type| source ---|---|--- 2025-06-22 19:25:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114728652459736841 2025-06-23 04:48:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19180 2025-06-23 05:01:05+00:00| published-proof-of-concept|...

CVE-2025-4748

creationtimestamp| type| source ---|---|--- 2025-06-16 11:39:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18442 2025-06-16 13:12:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114693212327975159 2025-06-16 15:30:31+00:00| seen|...

CVE-2025-5489

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-46176

creationtimestamp| type| source ---|---|--- 2025-05-23 19:01:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114558688604824160 2025-05-23 19:45:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17455 2025-05-23 21:29:51+00:00| seen|...

CVE-2025-3908

creationtimestamp| type| source ---|---|--- 2025-05-19 15:39:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16863 2025-05-19 17:22:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114535651589428390...

CVE-2025-46750

creationtimestamp| type| source ---|---|--- 2025-05-12 17:32:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114496055573801981 2025-05-12 18:24:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15940 2025-05-12 18:26:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15959...

CVE-2025-37874

creationtimestamp| type| source ---|---|--- 2025-05-09 07:25:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15697 2025-05-09 19:07:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114479439792019818...

CVE-2025-20978

creationtimestamp| type| source ---|---|--- 2025-05-07 12:23:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lolaapeislg2 2025-05-07 13:09:11+00:00| seen| https://t.me/cvedetector/24693...

CVE-2024-58237

creationtimestamp| type| source ---|---|--- 2025-05-05 15:23:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114455911703454153 2025-05-05 16:16:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3logrdaeww422 2025-05-09 08:25:23+00:00| published-proof-of-concept|...

CVE-2025-4299

creationtimestamp| type| source ---|---|--- 2025-05-05 12:28:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114455221831786910 2025-05-06 00:19:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15014 2025-05-06 00:36:52+00:00| seen|...

CVE-2023-53073

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable 'status' which contains the unhandled overflow bits is not being properly masked in some cases, displaying the following warning: WARNING: CPU: 156 PID: 475601 at...