CVE-2025-47548

Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through = 1.4.4...

CVE-2025-47548

The CVE-2025-47548 refers to an unauthenticated SSRF vulnerability in Wbcom Designs – Activity Link Preview For BuddyPress (WordPress plugin) up to version 1.4.4. Connected sources confirm the issue is Server-Side Request Forgery and affect the BuddyPress Activity Link Preview plugin, with Patchs...

CVE-2025-47548 WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through = 1.4.4...

CVE-2025-47548 WordPress Wbcom Designs - Activity Link Preview For BuddyPress <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress allows Server Side Request Forgery. This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through 1.4.4...

CVE-2025-20977

creationtimestamp| type| source ---|---|--- 2025-05-07 12:23:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lolakkb67el2 2025-05-07 13:09:07+00:00| seen| https://t.me/cvedetector/24692...

CVE-2025-20975

Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to launch arbitrary activity with systemui privilege...

CVE-2024-12120

creationtimestamp| type| source ---|---|--- 2025-05-07 08:03:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwih4arzl2 2025-05-07 08:21:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15286...

CVE-2025-32402

creationtimestamp| type| source ---|---|--- 2025-05-07 07:22:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15273 2025-05-07 08:05:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwjikxv7l2 2025-05-07...

CVE-2025-32404

creationtimestamp| type| source ---|---|--- 2025-05-07 07:22:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15271 2025-05-07 08:05:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwjiomdq52 2025-05-07...

CVE-2025-32405

creationtimestamp| type| source ---|---|--- 2025-05-07 07:21:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15270 2025-05-07 08:03:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwiifo25l2 2025-05-07 08:26:30+00:00| seen|...

CVE-2025-0853

creationtimestamp| type| source ---|---|--- 2025-05-07 00:02:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lok3qtsgobl2 2025-05-07 02:21:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokdlfffsl2p 2025-05-07...

CVE-2025-20975: Undefined Security Weakness

Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to launch arbitrary activity with systemui privilege...

Samsung SMR security vulnerabilities

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in SAMSUNG SMR, which stems from improper access control and could allow a local attacker to initiate arbitrary activity wi...

PT-2025-20161 · Wbcom Designs · Activity Link Preview For Buddypress

Name of the Vulnerable Software and Affected Versions: Wbcom Designs - Activity Link Preview For BuddyPress versions 1.4.4 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For versions 1.4.4 and...

CVE-2025-47548: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through = 1.4.4...

GHSA-9PCC-GVX5-R5WM

creationtimestamp| type| source ---|---|--- 2025-05-06 17:13:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114462007419812570 2025-05-06 18:21:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15182 2025-05-06 19:30:34+00:00| published-proof-of-concept|...

Malicious code in testveriftest1asdlaaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ff36b3e2ad882727ed964a43d4599f3713d2bada89b6cec169d727127c21c2fa During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-3602 Malicious code in testveriftest1asdlaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b241cae62c005e3cd31a8251941ab101ebcca75aa4c8cb988905e87529339cd During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The Linux kernel CVE team has assigned CVE-2024-35855 to this issue. Upstream advisory:...

MAL-2025-3718 Malicious code in landsat-tiler (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61fe6ddc244e63c8c39ace5a34847e4b308d9e9b6ef38676efaf8de13cefd709 Any computer that has this package installed or running should be considered...