CVE-2025-44872

creationtimestamp| type| source ---|---|--- 2025-05-02 15:17:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14501 2025-05-02 15:59:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo73xkzqzvk2 2025-05-02...

CVE-2022-49927

In the Linux kernel, the following vulnerability has been resolved: nfs4: Fix kmemleak when allocate slot failed If one of the slot allocate failed, should cleanup all the other allocated slots, otherwise, the allocated slots will leak: unreferenced object 0xffff8881115aa100 size 64: comm...

CVE-2025-29825

creationtimestamp| type| source ---|---|--- 2025-05-02 04:47:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114436423868001029 2025-05-02 05:04:04+00:00| seen| https://t.me/cvedetector/24303 2025-05-08 03:12:38+00:00| seen|...

Wordfence Intelligence Weekly WordPress Vulnerability Report (April 21, 2025 to April 27, 2025)

In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. Last week, there were 232 vulnerabilities disclosed in 199 WordPress...

CVE-2025-32011

creationtimestamp| type| source ---|---|--- 2025-05-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01 2025-05-01 19:15:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14379 2025-05-01 20:36:00+00:00| seen|...

CVE-2025-2774

creationtimestamp| type| source ---|---|--- 2025-05-01 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-282/ 2025-05-04 02:00:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3locqzuaxkk2q 2025-05-04 04:40:43+00:00| seen| https://t.me/CyberBulletin/10744...

CVE-2025-46558

creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14127 2025-04-30 19:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114428642542388304 2025-04-30 20:30:48+00:00| seen|...

PT-2025-18912 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns an uninitialized memory access in the Linux kernel. However, Red Hat Product Security has concluded that this CVE is not needed, indicating a rejection of the vulnerabilit...

CVE-2025-22883

creationtimestamp| type| source ---|---|--- 2025-04-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-119-02 2025-04-30 08:13:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13989 2025-04-30 10:00:18+00:00| seen|...

CVE-2025-4026

creationtimestamp| type| source ---|---|--- 2025-04-28 16:11:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13702 2025-04-28 19:50:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvjzdh3z22u 2025-04-28 19:54:59+00:00| seen|...

CVE-2025-23377

Dell PowerProtect Data Manager Reporting, versions 19.17, 19.18 contains an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs...

PT-2025-18015

Name of the Vulnerable Software and Affected Versions Apereo CAS version 5.2.6 Description A critical issue was found, affecting the saveService function of the RegisteredServiceSimpleFormController.java file in the Groovy Code Handler component. This issue leads to code injection and can be...

CVE-2025-28020

TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter...

CVE-2025-2470

creationtimestamp| type| source ---|---|--- 2025-04-25 12:09:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13406 2025-04-25 13:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnncroikpk2a 2025-04-25 13:48:43+00:00| seen|...

PT-2025-17931 · Unknown · Filez Client

Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: An improper XML parsing issue was reported in the FileZ client, which could allow arbitrary file reads on the system if a crafted URL is visited by a local user. Recommendations: At th...

vesilahti.fi Cross Site Scripting vulnerability OBB-4049113

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

xlmgokong88.com Cross Site Scripting vulnerability OBB-4049112

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Wordfence Intelligence Weekly WordPress Vulnerability Report (April 14, 2025 to April 20, 2025)

In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. Last week, there were 259 vulnerabilities disclosed in 222 WordPress...

cosmetr.com Cross Site Scripting vulnerability OBB-4049105

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mikejonesdui.com Cross Site Scripting vulnerability OBB-4049088

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...