CVE-2025-39529

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robin Cornett Scriptless Social Sharing scriptless-social-sharing allows Stored XSS.This issue affects Scriptless Social Sharing: from n/a through = 3.3.0...

CVE-2025-0758

Overview The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. CWE-732 Description Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, is installed wit...

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

CVE-2025-32980

creationtimestamp| type| source ---|---|--- 2025-04-25 21:08:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13539 2025-04-25 23:20:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnoedftiox2s 2025-04-26 01:52:36+00:00| seen| https://t.me/cvedetector/23790...

CVE-2025-46333

The CVE-2025-46333 issue in z2d affects versions 0.5.1 up to 0.6.0, where writing between surfaces via z2d.compositor.StrideCompositor.run and certain anti-aliasing modes can cause the source surface to be out-of-bounds on the x-axis due to a negative offset. This leads to an overflow in the stri...

CVE-2025-25427

A stored cross-site scripting XSS vulnerability in the upnp.htm page of the web Interface in TP-Link WR841N v14/v14.6/v14.8 = Build 241230 Rel. 50788n allows remote attackers to inject arbitrary JavaScript code via the port mapping description. This leads to an execution of the JavaScript payload...

CVE-2025-3651

Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions 10.8.1.46 and earlier allows attackers to execute arbitrary commands via unauthorized access to the Agent service. This has been remediated in Work Desktop for Mac version 10.8.2.33...

CVE-2025-30158

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the forum allows users to post iframe elements inside forum topics/comments/feed with no restriction on the iframe's width and height attributes. This allows an authenticated attacker ...

CVE-2025-29784

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the s parameter in GET requests for forum search functionality lacks length validation, allowing attackers to submit excessively long search queries. This oversight can lead to...

CVE-2025-23174

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2025-32836

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'GetConnectionVariables' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...

CVE-2025-32535

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digireturn DN Shipping by Weight for WooCommerce dn-shipping-by-weight allows Reflected XSS.This issue affects DN Shipping by Weight for WooCommerce: from n/a through = 1.2...

CVE-2025-32832

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockProjectUserRights' method. This could allow an authenticated remote attacker to bypass authorization controls, to read fr...

CVE-2025-32649

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gb-plugins GB Gallery Slideshow gb-gallery-slideshow allows Reflected XSS.This issue affects GB Gallery Slideshow: from n/a through = 1.3...

CVE-2025-32583

Improper Control of Generation of Code 'Code Injection' vulnerability in termel PDF 2 Post pdf2post allows Remote Code Inclusion.This issue affects PDF 2 Post: from n/a through = 2.4.0...

CVE-2025-32611

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in We Are De WooCommerce TBC Credit Card Payment Gateway Free woo-tbc-payment-gateway allows Reflected XSS.This issue affects WooCommerce TBC Credit Card Payment Gateway Free: from n/a through = 2.0.0...

CVE-2025-32530

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce allows Reflected XSS.This issue affects Wallet System for WooCommerce: from n/a through = 2.6.8...

CVE-2025-46618

creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq763sed24 2025-04-25 19:11:11+00:00| seen| https://t.me/cvedetector/23766 2025-05-13 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-287/...

CVE-2021-32601

creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq766rdu2b 2025-04-25 19:11:09+00:00| seen| https://t.me/cvedetector/23763...

CVE-2025-43016

creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq75y7n52v 2025-04-25 19:11:12+00:00| seen| https://t.me/cvedetector/23767...