CVE-2025-21686

creationtimestamp| type| source ---|---|--- 2025-02-10 16:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtk5rexfe2i 2025-02-10 16:45:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113980598265852945 2025-02-10 18:45:49+00:00| seen|...

CVE-2024-57392

Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service DoS on the FTP service by sending a maliciously crafted message to the ProFTPD service port...

CVE-2025-20045

creationtimestamp| type| source ---|---|--- 2025-02-05 17:37:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113952492476102575 2025-02-05 18:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6k3cos62j...

CVE-2025-22475

creationtimestamp| type| source ---|---|--- 2025-02-04 03:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhd3r524672e 2025-02-04 06:13:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhdfoqp3k72e 2025-02-04 06:21:46+00:00| seen|...

CVE-2024-57968

creationtimestamp| type| source ---|---|--- 2025-02-03 19:16:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113941555703677096 2025-02-03 20:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhced4xduj2e 2025-02-03 20:37:54+00:00| seen|...

CVE-2025-24506

Broadcom Symantec Privileged Access Management (PAM) is cited as affected by CVE-2025-24506. The connected PT-2025-5378 entry states: a specific authentication strategy allows learning the IDs of PAM users associated with certain authentication types, but it does not specify affected versions and...

CVE-2025-0743

creationtimestamp| type| source ---|---|--- 2025-01-30 12:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhlvhjlw27 2025-01-30 14:15:55+00:00| seen| https://t.me/cvedetector/16759 2025-01-30 15:24:55+00:00| seen|...

CVE-2023-35017

creationtimestamp| type| source ---|---|--- 2025-01-29 00:09:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113908735032933642 2025-01-29 00:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtouectig2n 2025-01-29 01:10:00+00:00| seen|...

CVE-2024-45336

The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however,...

CVE-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

CVE-2025-23756 WordPress LawPress plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ivanchernyakov LawPress – Law Firm Website Management lawpress allows Reflected XSS.This issue affects LawPress – Law Firm Website Management: from n/a through = 1.4.5...

CVE-2024-35111

creationtimestamp| type| source ---|---|--- 2025-01-25 13:35:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113889257478861428 2025-01-25 14:05:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3083 2025-01-25 17:06:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3104...

CVE-2025-24704

creationtimestamp| type| source ---|---|--- 2025-01-24 21:47:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113885526576461511...

CVE-2025-24644

creationtimestamp| type| source ---|---|--- 2025-01-24 19:47:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113885054196668289...

CVE-2023-37019

Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an S1Setup Request message missing a required Supported TAs field to repeatedly crash the MME, resulting in denial of service...

CVE-2025-23692

creationtimestamp| type| source ---|---|--- 2025-01-16 20:19:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv43agb5q2t 2025-01-16 22:05:52+00:00| seen| https://t.me/cvedetector/15634 2025-01-17 00:23:22+00:00| seen|...

CVE-2024-50858

creationtimestamp| type| source ---|---|--- 2025-01-15 00:03:19+00:00| seen| https://t.me/cvedetector/15376 2025-01-15 17:48:23+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113833626963845673...

CVE-2025-21340

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpumfgz4o2t 2025-01-15 01:56:35+00:00| seen|...

CVE-2024-52963

A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets...

CVE-2024-43657

creationtimestamp| type| source ---|---|--- 2025-01-09 08:16:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/912 2025-01-09 08:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcagnja4m2d 2025-01-09 08:32:54+00:00| seen|...