GHSA-HRW9-GGG3-3R4R

creationtimestamp| type| source ---|---|--- 2025-02-26 21:25:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5613 2025-12-29 21:01:14+00:00| seen| https://github.blog/security/vulnerability-research/bugs-that-survive-the-heat-of-continuous-fuzzing/...

Posts scraped data to IP address associated with other malware distribution attacks.

Published in 2021, the imblog package is a Python librarythat scrapes data from a blog page to an IP address associated with other malware distribution attacks...

DevOpsDays 2025

...

CVE-2025-25460

A stored Cross-Site Scripting XSS vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. This vulnerability allows authenticated attackers to inject malicious JavaScript payloads into blog posts, which are executed when other users view the posts. The issue arises due to...

PT-2025-8758 · Pypi · Imblog

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a Python library that scrapes data from a blog page to an IP address associated with other malware distribution attacks. Recommendations: At the moment, there is no...

CVE-2025-25460

A stored Cross-Site Scripting XSS vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. This vulnerability allows authenticated attackers to inject malicious JavaScript payloads into blog posts, which are executed when other users view the posts. The issue arises due to...

Tale Blog Code Injection Vulnerability

Tale Blog is a Java blog. A cross-site scripting vulnerability exists in Tale Blog version 2.0.5 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data in the logourl parameter of the OptionsService function of...

CVE-2025-25507

creationtimestamp| type| source ---|---|--- 2025-02-21 17:18:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4925 2025-02-21 19:46:43+00:00| seen| https://t.me/cvedetector/18672 2025-08-12 16:01:32+00:00| seen|...

Deepseek: Why it Matters and What the Press Got Wrong

...

Introducing New Akamai Object Storage Endpoints

...

Managed Databases as Code Using Terraform

...

CVE-2024-13656: Missing Authorization

The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanelofajaxcallback function in all versions up to, and including, 3.6.0. This makes it...

CVE-2025-21184

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbdna7lo2a 2025-02-11 18:19:13+00:00| seen|...

CVE-2025-21190

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbds5eva2z 2025-02-11 18:19:13+00:00| seen|...

CVE-2025-21352

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:17:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbf65lga2x 2025-02-11 19:19:18+00:00| seen|...

GHSA-CRG3-FJM2-XVPQ

creationtimestamp| type| source ---|---|--- 2025-02-11 14:00:07+00:00| seen| https://daniel.haxx.se/blog/2025/02/11/disabling-cert-checks-we-have-not-learned-much/...

GHSA-9MGX-552F-59P6

creationtimestamp| type| source ---|---|--- 2025-02-11 09:53:02+00:00| seen| https://mastodon.social/users/bagder/statuses/113984640008586392 2025-02-11 10:01:07+00:00| seen| https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3lhvf7dyo2642 2025-02-11 14:00:07+00:00| seen|...

OneBlog security vulnerabilities

OneBlog is a Java blog. OneBlog suffers from a template injection vulnerability, no details of the vulnerability are provided at this time...

Friday Squid Blogging: The Colossal Squid

Long article on the colossal squid. Blog moderation policy...

CVE-2025-0460

A vulnerability, which was classified as critical, was found in Blog Botz for Journal Theme 1.0 on OpenCart. This affects an unknown part of the file /index.php?route=extension/module/blogadd. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the atta...