CVE-2024-25985

creationtimestamp| type| source ---|---|--- 2024-03-11 20:26:52+00:00| seen| https://t.me/ctinow/205033...

CVE-2024-25985

The CVE-2024-25985 issue affects the bigo_unlocked_ioctl path in bigo.c, described as a Use-After-Free caused by a missing bounds check. The impact is local privilege escalation with high severity (CVSS: LOCAL, NONE user interaction). Documents in multiple feeds (NVD, Red Hat, PRION, OSV) consist...

CVE-2024-25985

In bigounlockedioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-25985

Cross-Site Request Forgery CSRF vulnerability in Tomas | Docs | FAQ | Premium Support WordPress Tooltips.This issue affects WordPress Tooltips: from n/a through 8.2.5...

CVE-2023-25985

Cross-Site Request Forgery CSRF vulnerability in Tomas | Docs | FAQ | Premium Support WordPress Tooltips.This issue affects WordPress Tooltips: from n/a through 8.2.5...

CVE-2023-25985

CVE-2023-25985 is a CSRF vulnerability in the WordPress Tooltips plugin (

WordPress WordPress Tooltips Plugin <= 8.2.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software WordPress Tooltips Type Plugin Vulnerable versions = 8.2.5 Fixed in 8.2.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25985 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2638ae40106b Credits Abdi Pranata...

CVE-2021-25985

creationtimestamp| type| source ---|---|--- 2021-11-17 16:27:33+00:00| seen| https://t.me/cibsecurity/32507...

CVE-2021-25985

In Factor (App Framework & Headless CMS) from v1.0.4 through v1.8.30, the vulnerability stems from improperly invalidating a user session after logout and storing sessions in browser local storage (which has no expiration). This enables an attacker to steal and reuse session data via XSS, potenti...

CVE-2020-25985

creationtimestamp| type| source ---|---|--- 2020-10-07 16:28:26+00:00| seen| https://t.me/cibsecurity/15107...

CVE-2020-25985

CVE-2020-25985 affects MonoCMS Blog 1.0. The vulnerability is described as Arbitrary File Deletion: any authenticated user can delete files on and off the webserver, with PHP files potentially unlinked rather than deleted. The connected documents confirm this as the concrete issue, but do not pro...