Vulmon

Vulnerability Intelligence Search Engine Offical Account | Follow @VulmonFeeds for vulnerability feed

[Clerk @clerk]

Today we published CVE-2025-53548 in response to a vulnerability in our verifyWebhook() helper.

It advises those using this helper to upgrade their npm package. Customers we believe were using affected versions were notified yesterday, in advance of the public disclosure.

We regret the introduction of this vulnerability and are extremely grateful to the Clerk customer who responsibly disclosed the issue. More details are available here:
https://t.co/bQ96d0h9Ek

[Vulmon @vulmoncom]

CVE-2024-46993: https://t.co/ttu8Qguao5

CVE-2024-46992: https://t.co/Jf58QKzmf1

[Vulmon @vulmoncom]

🚨 Two critical Electron vulns patched:

🔹 CVE-2024-46993 (CVSS: 4.4) — Heap buffer overflow in nativeImage functions

🔹 CVE-2024-46992 (CVSS: 7.8) — ASAR integrity bypass on Windows

👉 Update now!

#Electron #Vulmon #Electronjs

[Vulmon @vulmoncom]

🚨 CVE-2025-6554: High-severity type confusion vuln in Chrome V8 (pre-138.0.7204.96) allows arbitrary memory access via crafted HTML.

Exploit detected in the wild — update now!

#CyberSecurity #Vulmon

https://t.co/fQuqQoDOjQ

[Rich Mirch @0xm1rch]

I published blogs detailing two vulnerabilities I recently discovered in Sudo. Update to 1.9.17p1.

CVE-2025-32462 - Sudo Host option Elevation of Privilege Vulnerability https://t.co/UEvovFPNiv

CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability https://t.co/0I218Xv3kQ

[Horizon3 Attack Team @Horizon3Attack]

Just finished reproducing CVE-2025-32433 and putting together a quick PoC exploit — surprisingly easy. Wouldn’t be shocked if public PoCs start dropping soon. If you’re tracking this, now’s the time to take action. #Erlang #SSH

[Vulmon @vulmoncom]

Details: https://t.co/tNQrTm9YIM

[Vulmon @vulmoncom]

🚨 CVE-2024-48887 Fortinet FortiSwitch GUI vuln (CVSS 9.3)

A remote attacker can change admin passwords without authentication via the set_password endpoint.

Unauthenticated access + no verification = full control.

#Vulmon #CyberSecurity #Fortinet

[Vulmon @vulmoncom]

Details: https://t.co/1I4hBsvc2X

[Vulmon @vulmoncom]

🚨 WhatsApp for Windows Vulnerability: CVE-2025-30401

A crafted attachment could trick users into running malicious code instead of just opening the file — simply by clicking it inside WhatsApp.

#Vulmon #WhatsApp #infosec

[Vulmon @vulmoncom]

Details of CVE-2025-22457: https://t.co/RHCG4XQmSF

[Vulmon @vulmoncom]

CVE-2025-22457: Stack-based buffer overflow in Ivanti Connect Secure (≤22.7R2.5), Policy Secure & ZTA Gateways could lead to remote code execution (CVSS 9.0).

🚨 limited exploitation observed.

#vulmon #ivanti #infosec

[Vulmon @vulmoncom]

CVE-2025-29927: https://t.co/WktcuHuj9n

[Vulmon @vulmoncom]

Authorization Bypass Vulnerability in Vercel Next.js: CVE-2025-29927

It is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware.

CVSS: 9.1

#Vulmon #React #nextjs #Vercel

[Vulmon @vulmoncom]

Details: https://t.co/NAsVuJjEOS

[Vulmon @vulmoncom]

🚨 CVE-2025-0755: MongoDB Buffer Overflow Vulnerability 🚨

CVSS Score: 8.4

Affected:
🔹 libbson < 1.27.5
🔹 MongoDB Server < 8.0.1 (v8.0)
🔹 MongoDB Server < 7.0.16 (v7.0)

Update now! 🔒 #CyberSecurity #MongoDB #Vulmon

[Vulmon @vulmoncom]

CVE-2025-29909: https://t.co/zuymTUuCQW

CVE-2025-29911: https://t.co/4rcaNXGSqw

CVE-2025-29912: https://t.co/FRKea5MkkC

CVE-2025-29913: https://t.co/jtYzBOBbyx

#CyberSecurity #SpaceTech #Vulmon

[Vulmon @vulmoncom]

🚀 NASA CryptoLib RCE vulnerabilities impact space communication systems!

CryptoLib secures spacecraft-ground station comms using CCSDS SDLS-EP.

#CyberSecurity #SpaceTech #Vulmon

CVE-2025-29909, CVE-2025-29911, CVE-2025-29912, CVE-2025-29913

[Vulmon @vulmoncom]

Details of CVE-2024-46662

https://t.co/88IGvGKenJ

[Vulmon @vulmoncom]

🚨 CVE-2024-46662 – Fortinet FortiManager Command Execution 🚨

Functional exploits exist!
Affected: FortiManager 7.4.1–7.4.3 & FortiManager Cloud 7.4.1–7.4.3

#Fortinet #Infosec #Vulmon