CVE-2025-20221

A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. This vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this...

CVE-2025-46192

creationtimestamp| type| source ---|---|--- 2025-05-09 17:25:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15779 2025-05-09 18:32:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rsepgq24 2025-05-09 20:23:19+00:00| seen|...

CVE-2025-29509

creationtimestamp| type| source ---|---|--- 2025-05-09 17:25:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15777 2025-05-09 18:32:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rsvtnf2w 2025-05-09 20:23:25+00:00| seen|...

CVE-2025-1993 IBM App Connect Enterprise Certified Container information disclosure

IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8, 12.9, and 12.10 DesignerAuthoring instances store their flows in a database that is protected by weaker than expected...

CVE-2025-46189

creationtimestamp| type| source ---|---|--- 2025-05-09 16:25:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15762 2025-05-09 18:32:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rs63r42r 2025-05-09 20:23:38+00:00| seen|...

CVE-2025-0549

creationtimestamp| type| source ---|---|--- 2025-05-09 16:24:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15760 2025-05-09 16:45:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loquka7sqgg2 2025-05-09...

CVE-2024-8973

creationtimestamp| type| source ---|---|--- 2025-05-09 16:24:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15758 2025-05-09 16:45:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqukb4rxvh2 2025-05-09...

CVE-2025-28202

Incorrect access control in Victure RX1800 ENV1.0.0r12110933 allows attackers to enable SSH and Telnet services without authentication...

CVE-2025-28203

Victure RX1800 ENV1.0.0r12110933 was discovered to contain a command injection vulnerability...

CVE-2024-13962

creationtimestamp| type| source ---|---|--- 2025-05-09 16:05:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqsk26c7eh2 2025-05-09 16:12:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114478753232862764 2025-05-09...

CVE-2025-47476

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in add-ons.org Cost Calculator for Elementor cost-calculator-for-elementor allows DOM-Based XSS.This issue affects Cost Calculator for Elementor: from n/a through = 1.3.3...

CVE-2025-47593

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jonas Hjalmarsson Really Simple Under Construction Page really-simple-under-construction allows Stored XSS.This issue affects Really Simple Under Construction Page: from n/a through = 1.4.6...

CVE-2025-47486

Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Plus: from n/a through = 3.1.9...

CVE-2025-47688

Missing Authorization vulnerability in Saad Iqbal Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through = 5.3.1...

CVE-2025-46193

creationtimestamp| type| source ---|---|--- 2025-05-09 15:25:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15739 2025-05-09 18:32:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rrszcz2o 2025-05-09 20:23:27+00:00| seen|...

CVE-2025-47503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpo-HR NGG Smart Image Search ngg-smart-image-search allows Stored XSS.This issue affects NGG Smart Image Search: from n/a through = 3.3.3...

CVE-2025-47525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through = 5.3.0...

CVE-2025-47480

Missing Authorization vulnerability in Iqonic Design Graphina graphina-elementor-charts-and-graphs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Graphina: from n/a through = 3.0.4...

CVE-2025-47624

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

CVE-2025-47636

Path Traversal: '.../...//' vulnerability in Fernando Briano List category posts list-category-posts allows PHP Local File Inclusion.This issue affects List category posts: from n/a through = 0.91.0...