CVE-2025-0785

creationtimestamp| type| source ---|---|--- 2025-01-28 21:36:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113908135060417840 2025-01-28 22:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgti6h6qcl2n 2025-01-28 23:09:48+00:00| seen|...

CVE-2024-40674

creationtimestamp| type| source ---|---|--- 2025-01-28 19:46:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113907701538509621 2025-01-28 20:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbiwdium27 2025-01-28 22:09:30+00:00| seen|...

MAL-2025-595 Malicious code in digitalexp-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9833903519bade9052cdd1225ca96239d62fbff6d2cfc10be31dc013063ee830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rockwell Automation FactoryTalk

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute code on the device with elevated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

CVE-2023-27562

creationtimestamp| type| source ---|---|--- 2025-01-28 03:22:55+00:00| seen| Telegram/k7t03MalwjLdqCngJjZKPZP4--0UU7qsiY4l87dEKRbDADz...

CVE-2025-24154

creationtimestamp| type| source ---|---|--- 2025-01-27 22:19:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxvgqrcv2h 2025-01-28 00:23:43+00:00| seen| https://t.me/cvedetector/16543 2025-01-28 00:59:42+00:00| seen|...

CVE-2025-24109

creationtimestamp| type| source ---|---|--- 2025-01-27 22:17:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxsonhpa2t 2025-01-28 18:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113907474845310010 2025-03-19 14:16:47+00:00| seen|...

CVE-2025-24533

creationtimestamp| type| source ---|---|--- 2025-01-27 14:08:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113900710198750560 2025-01-27 14:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgq4vyfecg2j 2025-01-27 14:55:05+00:00| seen|...

CVE-2025-0720

creationtimestamp| type| source ---|---|--- 2025-01-26 23:07:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113897168658571421 2025-01-26 23:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgoklryujy2n 2025-01-27 01:06:54+00:00| seen|...

CVE-2023-38009

creationtimestamp| type| source ---|---|--- 2025-01-26 16:02:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113895497637771015 2025-01-26 16:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnt4rdc3h2n 2025-01-26 18:40:01+00:00| seen|...

CVE-2024-11913

The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajaxpreviewlink' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web...

CVE-2024-11913 Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery

The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajaxpreviewlink' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web...

CVE-2024-11913 Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery

The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajaxpreviewlink' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web...

Malicious code in meta-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 547b8b6ba1bfaeea42d8fe67ea9de77d254833b3f66166a437ec024f17fe24eb The OpenSSF Package Analysis project identified 'meta-gateway' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 793bfcfb95a79b8cd268833db69c5dc0bc95766ce7acef8947614e19d8e27afc The OpenSSF Package Analysis project identified 'meli-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58c0d486a0a319a7ba6fbad3e5c15fe0bbf6966cac7c5a7f3ebee46c2c7f8bb7 The OpenSSF Package Analysis project identified 'lyft-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 27016990cb829cd062af401322eecdb598a33abe92ab20ee617101c4fc921003 The OpenSSF Package Analysis project identified 'meli-api' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 152f98442370419a0e0c3fb36c2e01d398741677238bd205877b136806a6922b The OpenSSF Package Analysis project identified 'meli-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcdf3711c3a60bf5a37d61a0b61ff485f47ea89580e09542881d51f6192ff73d The OpenSSF Package Analysis project identified 'lyft-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 115bad0fa70cde21c6adc84e89cc502d81a28568a9b34867b1fcad432dc49050 The OpenSSF Package Analysis project identified 'lyft-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...