CVE-2025-1061

creationtimestamp| type| source ---|---|--- 2025-02-07 01:59:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113960128382345559 2025-02-07 02:17:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkjuqd36w25 2025-02-07 02:49:22+00:00| seen|...

CVE-2025-1084

creationtimestamp| type| source ---|---|--- 2025-02-06 23:35:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113959561999278807 2025-02-07 00:20:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkdehcres2u 2025-02-07 02:06:34+00:00| seen|...

CVE-2024-53586

creationtimestamp| type| source ---|---|--- 2025-02-06 21:41:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113959115028131851 2025-02-06 22:16:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gfr6ib24 2025-02-06 22:49:12+00:00| seen|...

CVE-2024-47258

creationtimestamp| type| source ---|---|--- 2025-02-06 19:20:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113958559501650306 2025-02-06 20:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvowds5w26 2025-02-06 20:48:33+00:00| seen|...

CVE-2025-22992

creationtimestamp| type| source ---|---|--- 2025-02-06 18:28:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113958357304730897 2025-02-06 19:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjscoic432x 2025-02-06 21:55:36+00:00| seen|...

CVE-2023-5878

creationtimestamp| type| source ---|---|--- 2025-02-06 14:19:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113957375605890754 2025-02-06 14:51:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113957501258847591 2025-02-06 15:15:43+00:00| seen|...

CVE-2021-4406

An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC go to the alert manager open the ITSM tab add a webhook with the URL/service token value ' -h && id | tee /tmp/ttttttddddssss ' whitespaces are tab characters click add click apply create a test alert The tes...

CVE-2021-35222

This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution RCE from the Alerts Settings page...

CVE-2021-35220

Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution RCE from the Alerts Settings page...

CVE-2024-51450

creationtimestamp| type| source ---|---|--- 2025-02-06 00:32:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113954125870793330 2025-02-06 01:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhvxrlc722r 2025-02-06 02:44:21+00:00| seen|...

CVE-2024-57082

creationtimestamp| type| source ---|---|--- 2025-02-05 21:16:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113953353403713809 2025-02-05 22:17:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhly67a672i 2025-02-06 01:50:59+00:00| seen|...

GHSA-CXQQ-W3X5-7PH3

creationtimestamp| type| source ---|---|--- 2025-02-05 18:44:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113952756172745897 2025-02-05 19:35:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113952958359120211...

CVE-2025-24803

creationtimestamp| type| source ---|---|--- 2025-02-05 18:44:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113952756172745897 2025-02-05 19:18:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhbz6hwmx2w 2025-02-05 21:39:47+00:00| seen|...

CVE-2024-56131

creationtimestamp| type| source ---|---|--- 2025-02-05 18:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6jhwr7u27 2025-02-05 18:48:31+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113952770990462952 2025-02-05 22:08:54+00:00| seen|...

CVE-2025-23239

creationtimestamp| type| source ---|---|--- 2025-02-05 18:07:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113952610543794801 2025-02-05 18:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6kjnt562t 2025-02-05 18:48:33+00:00| seen|...

CVE-2025-1044

creationtimestamp| type| source ---|---|--- 2025-02-05 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-085/ 2025-02-11 20:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwi2ltxps2a 2025-02-11 20:48:54+00:00| seen|...

CVE-2024-36408

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in the Alerts controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

CVE-2024-36517

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...

CVE-2024-26266

Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.2.0 through 7.4.3.13, and older unsupported versions, and Liferay DXP 7.4 before update 10, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allow remote authenticated users to inject arbitrary...

CVE-2025-0364

creationtimestamp| type| source ---|---|--- 2025-02-04 17:56:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113946906751178412 2025-02-04 18:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhenzxr6ut2f 2025-02-04 18:48:30+00:00| seen|...