CVE-2025-23900

Cross-Site Request Forgery CSRF vulnerability in genkisan Genki Announcement genki-announcement allows Cross Site Request Forgery.This issue affects Genki Announcement: from n/a through = 1.4.1...

CVE-2025-23900 WordPress Genki Announcement plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in genkisan Genki Announcement genki-announcement allows Cross Site Request Forgery.This issue affects Genki Announcement: from n/a through = 1.4.1...

CVE-2025-23900

CVE-2025-23900 is a Cross-Site Request Forgery to Stored Cross-Site Scripting issue in Genki Announcement (WordPress plugin) affecting versions up to 1.4.1. Connected sources confirm the vulnerability type and scope, citing Genki Announcement

WordPress Genki Announcement plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Genki Announcement versions = 1.4.1...

PT-2025-5183 · Unknown · Genkisan Genki Announcement

Name of the Vulnerable Software and Affected Versions: Genkisan Genki Announcement versions 1.4.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be done by tricking the...

WordPress plugin Genki Announcement 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress...

SUSE: Security Advisory (SUSE-SU-2025:0122-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-86C2-4X57-WC8G

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1581...

CVE-2024-57642

creationtimestamp| type| source ---|---|--- 2025-01-14 01:08:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1447 2025-01-14 01:17:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cpvyl22c 2025-01-14 02:01:31+00:00| seen|...

BELL-CVE-2025-23016

Bulletin has no description...

SUSE: Security Advisory (SUSE-SU-2025:0067-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-9134

creationtimestamp| type| source ---|---|--- 2025-01-10 21:50:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113806267109519742 2025-01-10 22:05:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1253 2025-01-10 22:16:17+00:00| seen|...

SUSE: Security Advisory (SUSE-SU-2025:0044-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:0051-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-28120

There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input...

CVE-2023-27539

There is a denial of service vulnerability in the header parsing component of Rack...

CVE-2023-47778

CVE-2023-47778 concerns LuckyWP Scripts Control for WordPress. The vulnerability is a Missing Authorization/Broken Access Control issue in LuckyWP Scripts Control versions

CVE-2024-37421

creationtimestamp| type| source ---|---|--- 2025-01-02 12:18:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2p4pppy25 2025-01-02 16:53:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113759800570971756...

CVE-2023-47647

CVE-2023-47647 corresponds to a Missing Authorization (Broken Access Control) vulnerability in LearningTimes BadgeOS, affecting BadgeOS up to version 3.7.1.6. The issue originates from misconfigured access control levels, enabling unauthorized actions. Reported CVSS 3.1 base score 4.3 (Medium). C...