WordPress Gutenberg Blocks by Kadence Blocks Plugin <= 3.2.19 is vulnerable to Server Side Request Forgery (SSRF)

Software Gutenberg Blocks by Kadence Blocks Type Plugin Vulnerable versions = 3.2.19 Fixed in 3.2.20 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-23500 Patch priority Low CVSS severity Low 7.7 Developer KadenceWP PSID 12733422b1ab...

WordPress GiveWP Plugin <= 3.4.2 is vulnerable to PHP Object Injection

Software GiveWP Type Plugin Vulnerable versions = 3.4.2 Fixed in 3.5.0 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-30229 Patch priority Medium CVSS severity Medium 8 Developer Liquid Web / StellarWP PSID 9a991fbaf7bc Credits Rafie Muhammad Patchstack Required...

WordPress Contact Form to Any API Plugin <= 1.1.8 is vulnerable to SQL Injection

Software Contact Form to Any API Type Plugin Vulnerable versions = 1.1.8 Fixed in 1.1.9 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30242 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID f2d596609a9a Credits Le Ngoc Anh Required privilege Subscrib...

WordPress BetterDocs Plugin <= 3.3.3 is vulnerable to PHP Object Injection

Software BetterDocs Type Plugin Vulnerable versions = 3.3.3 Fixed in 3.3.4 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-30226 Patch priority High CVSS severity High 9 Developer Claim ownership PSID 4a7582c42893 Credits stealthcopter Required privilege Unauthenticate...

WordPress Church Admin Plugin <= 4.0.27 is vulnerable to SQL Injection

Software Church Admin Type Plugin Vulnerable versions = 4.0.27 Fixed in 4.0.28 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30244 Patch priority Medium CVSS severity Medium 8.5 Developer Andy Moyle PSID f10836385922 Credits LVT-tholv2k Required privilege Contributor...

studyinjapan-asean.jp Cross Site Scripting vulnerability OBB-3885952

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Media Library Assistant Plugin <= 3.13 is vulnerable to SQL Injection

Software Media Library Assistant Type Plugin Vulnerable versions = 3.13 Fixed in 3.14 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-2871 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 35f3b6344141 Credits stealthcopter Required privilege Contributor...

CVE-2016-3980

creationtimestamp| type| source ---|---|--- 2024-03-25 14:38:11+00:00| seen| Telegram/iXy7dsjFz6zbDAVebZAEB91G2mRh46gbKDEU733c1d-0Dg 2024-03-25 14:38:11+00:00| seen| https://t.me/tengkorakcybercrewz/4401 2024-03-25 14:38:11+00:00| seen| https://t.me/tengkorakcybercrewz/811 2024-03-26...

CVE-2017-9845

creationtimestamp| type| source ---|---|--- 2024-03-25 14:38:11+00:00| seen| Telegram/iXy7dsjFz6zbDAVebZAEB91G2mRh46gbKDEU733c1d-0Dg 2024-03-25 14:38:11+00:00| seen| https://t.me/tengkorakcybercrewz/4401 2024-03-25 14:38:11+00:00| seen| https://t.me/tengkorakcybercrewz/811 2024-03-26...

CVE-2016-4015

creationtimestamp| type| source ---|---|--- 2024-03-25 14:38:11+00:00| seen| Telegram/iXy7dsjFz6zbDAVebZAEB91G2mRh46gbKDEU733c1d-0Dg 2024-03-25 14:38:11+00:00| seen| https://t.me/tengkorakcybercrewz/4401 2024-03-25 14:38:11+00:00| seen| https://t.me/tengkorakcybercrewz/811 2024-03-26...

CVE-2017-9843

creationtimestamp| type| source ---|---|--- 2024-03-25 14:38:11+00:00| seen| Telegram/iXy7dsjFz6zbDAVebZAEB91G2mRh46gbKDEU733c1d-0Dg 2024-03-25 14:38:11+00:00| seen| https://t.me/tengkorakcybercrewz/4401 2024-03-25 14:38:11+00:00| seen| https://t.me/tengkorakcybercrewz/811 2024-03-26...

CVE-2015-2819

creationtimestamp| type| source ---|---|--- 2024-03-25 14:38:09+00:00| seen| Telegram/HKj6TR4hMohrGsEUcNFDijNGdim3MCZhggfzha3EYtXw 2024-03-25 14:38:09+00:00| seen| https://t.me/tengkorakcybercrewz/4400 2024-03-25 14:38:09+00:00| seen| https://t.me/tengkorakcybercrewz/810 2024-03-26 12:31:51+00:00...

CVE-2024-29937

creationtimestamp| type| source ---|---|--- 2024-03-23 09:10:16+00:00| seen| Telegram/Er7znV7HeHIdLp131NY8aC40BUkqZpHpHmm5FuC5C8oZ6nEt 2024-03-26 08:16:39+00:00| seen| https://t.me/habrcomnews/26481 2026-07-26 00:00:13+00:00| seen| https://t.me/linuxkalii/743 2026-08-06 03:00:04+00:00| seen|...

CVE-2024-29099

creationtimestamp| type| source ---|---|--- 2024-03-19 17:26:58+00:00| seen| https://t.me/ctinow/211734...

CVE-2024-1791

creationtimestamp| type| source ---|---|--- 2024-03-14 22:26:24+00:00| seen| https://t.me/ctinow/208220...

CVE-2024-1883

creationtimestamp| type| source ---|---|--- 2024-03-14 05:21:43+00:00| seen| https://t.me/ctinow/207459 2024-03-14 05:26:53+00:00| seen| https://t.me/ctinow/207467...

CVE-2024-27279

creationtimestamp| type| source ---|---|--- 2024-03-12 10:26:54+00:00| seen| https://t.me/ctinow/205488...

About the security content of Safari 17.4

About the security content of Safari 17.4 This document describes the security content of Safari 17.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

GHSA-M7WR-2XF7-CM9P

creationtimestamp| type| source ---|---|--- 2024-03-04 21:26:22+00:00| seen| https://t.me/ctinow/199615 2025-06-12 16:34:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18197...

CentOS 9 : curl-7.76.1-26.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the curl-7.76.1-26.el9 build changelog. - A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on...