CERTFR-2020-ALE-010

creationtimestamp| type| source ---|---|--- 2025-01-29 16:33:19+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfiz45lu24...

CERTFR-2017-ALE-015

creationtimestamp| type| source ---|---|--- 2025-01-29 16:22:31+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvevpbhv52d...

CERTFR-2024-CTI-009

creationtimestamp| type| source ---|---|--- 2025-01-29 13:51:46+00:00| seen| https://bsky.app/profile/test-cvp.bsky.social/post/3lgv4i5vr332i...

MAL-2025-600 Malicious code in digitalexp-datasource-definitions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36663c1c097e4ad0179af75313622f87a6e8b4c1ccd10cf2d93e5a505e4c2985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-0785

creationtimestamp| type| source ---|---|--- 2025-01-28 21:36:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113908135060417840 2025-01-28 22:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgti6h6qcl2n 2025-01-28 23:09:48+00:00| seen|...

CVE-2024-40674

creationtimestamp| type| source ---|---|--- 2025-01-28 19:46:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113907701538509621 2025-01-28 20:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbiwdium27 2025-01-28 22:09:30+00:00| seen|...

MAL-2025-595 Malicious code in digitalexp-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9833903519bade9052cdd1225ca96239d62fbff6d2cfc10be31dc013063ee830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rockwell Automation FactoryTalk

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute code on the device with elevated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

CVE-2023-27562

creationtimestamp| type| source ---|---|--- 2025-01-28 03:22:55+00:00| seen| Telegram/k7t03MalwjLdqCngJjZKPZP4--0UU7qsiY4l87dEKRbDADz...

CVE-2025-24154

creationtimestamp| type| source ---|---|--- 2025-01-27 22:19:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxvgqrcv2h 2025-01-28 00:23:43+00:00| seen| https://t.me/cvedetector/16543 2025-01-28 00:59:42+00:00| seen|...

CVE-2025-24109

creationtimestamp| type| source ---|---|--- 2025-01-27 22:17:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxsonhpa2t 2025-01-28 18:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113907474845310010 2025-03-19 14:16:47+00:00| seen|...

CVE-2025-24533

creationtimestamp| type| source ---|---|--- 2025-01-27 14:08:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113900710198750560 2025-01-27 14:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgq4vyfecg2j 2025-01-27 14:55:05+00:00| seen|...

CVE-2025-0720

creationtimestamp| type| source ---|---|--- 2025-01-26 23:07:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113897168658571421 2025-01-26 23:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgoklryujy2n 2025-01-27 01:06:54+00:00| seen|...

CVE-2023-38009

creationtimestamp| type| source ---|---|--- 2025-01-26 16:02:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113895497637771015 2025-01-26 16:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnt4rdc3h2n 2025-01-26 18:40:01+00:00| seen|...

CVE-2024-11913

The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajaxpreviewlink' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web...

CVE-2024-11913 Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery

The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajaxpreviewlink' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web...

CVE-2024-11913 Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery

The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajaxpreviewlink' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web...

Malicious code in meta-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 547b8b6ba1bfaeea42d8fe67ea9de77d254833b3f66166a437ec024f17fe24eb The OpenSSF Package Analysis project identified 'meta-gateway' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 793bfcfb95a79b8cd268833db69c5dc0bc95766ce7acef8947614e19d8e27afc The OpenSSF Package Analysis project identified 'meli-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58c0d486a0a319a7ba6fbad3e5c15fe0bbf6966cac7c5a7f3ebee46c2c7f8bb7 The OpenSSF Package Analysis project identified 'lyft-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...