CVE-2025-30158

creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12467 2025-04-18 16:34:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln42fpgtpb2l 2025-04-18 17:27:57+00:00| seen|...

CVE-2024-29643

creationtimestamp| type| source ---|---|--- 2025-04-18 14:55:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3uuv2hm5l2...

CVE-2024-49808

creationtimestamp| type| source ---|---|--- 2025-04-18 11:15:18+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3ikubmydi2 2025-04-18 11:58:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12417 2025-04-18 16:34:32+00:00| seen|...

CVE-2025-3787

creationtimestamp| type| source ---|---|--- 2025-04-18 09:58:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12411 2025-04-18 11:16:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3ilpusivj2 2025-04-18...

CVE-2025-2613: Improper Neutralization of Input During Web Page Generation

The Login Manager – Design Login Page, View Login Activity, Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom logo and background URLs in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes...

Malicious code in web-sim-control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d3b8a674300adbbebf266b874c5c0505e514bace39bd005a46f18525cd3eb16 The OpenSSF Package Analysis project identified 'web-sim-control' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2025-31006

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arete-it Activity Reactions For Buddypress activity-reactions-for-buddypress allows Reflected XSS.This issue affects Activity Reactions For Buddypress: from n/a through = 1.0.22...

CVE-2025-31006 WordPress Activity Reactions For Buddypress plugin <= 1.0.22 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arete-it Activity Reactions For Buddypress activity-reactions-for-buddypress allows Reflected XSS.This issue affects Activity Reactions For Buddypress: from n/a through = 1.0.22...

CVE-2025-31006 WordPress Activity Reactions For Buddypress plugin <= 1.0.22 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arete-it Activity Reactions For Buddypress activity-reactions-for-buddypress allows Reflected XSS.This issue affects Activity Reactions For Buddypress: from n/a through = 1.0.22...

CVE-2025-31006

CVE-2025-31006 is an XSS vulnerability in WordPress plugin arete-it Activity Reactions For Buddypress (affected: Activity Reactions For Buddypress

CVE-2025-30701

creationtimestamp| type| source ---|---|--- 2025-04-17 04:57:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12181...

WordPress Plugin: Activity Reactions for Buddypress – Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

CVE-2025-31006: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arete-it Activity Reactions For Buddypress activity-reactions-for-buddypress allows Reflected XSS.This issue affects Activity Reactions For Buddypress: from n/a through = 1.0.22...

CVE-2025-0757 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Overview The software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. CWE-79 Description Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x...

CVE-2025-31200

creationtimestamp| type| source ---|---|--- 2025-04-16 17:33:02+00:00| seen| https://infosec.exchange/users/applsec/statuses/114348836934305541 2025-04-16 17:33:04+00:00| seen| https://bsky.app/profile/applsec.bsky.social/post/3lmx4qr3utx2e 2025-04-16 18:18:24+00:00| seen|...

CVE-2025-32433

creationtimestamp| type| source ---|---|--- 2025-04-16 17:15:29+00:00| seen| https://bsky.app/profile/skrillor.bsky.social/post/3lmx3r6hcf22d 2025-04-16 17:15:30+00:00| seen| https://bsky.app/profile/skrillor.bsky.social/post/3lmx3r75u2t2d 2025-04-16 17:15:30+00:00| seen|...

CVE-2025-2314

creationtimestamp| type| source ---|---|--- 2025-04-16 07:40:02+00:00| seen| https://t.me/cvedetector/23047...

CVE-2025-32948

PeerTube (inbox via ActivityPub) is affected by CVE-2025-32948, where mishandling of Create Activity can be abused to crash the server or trigger blind SSRF by sending crafted ActivityPub activities to the inbox. The vulnerability arises from handling ActivityPub activities in playlists, enabling...

CVE-2025-3608

creationtimestamp| type| source ---|---|--- 2025-04-15 14:11:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114342381621851193 2025-04-15 16:38:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmujatd6mw2h 2025-04-15 17:26:39+00:00| seen| https://t.me/cvedetector/229...

Growatt Cloud Applications

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to compromise confidentiality, achieve cross-site scripting, or code execution on affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...