23602 matches found
CVE-2025-28030
creationtimestamp| type| source ---|---|--- 2025-04-22 19:09:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngewdytzt2u 2025-04-22 20:54:45+00:00| seen| https://t.me/cvedetector/23530 2025-04-23 14:05:26+00:00| published-proof-of-concept|...
CVE-2025-28024
creationtimestamp| type| source ---|---|--- 2025-04-22 19:09:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngewcv35t2c 2025-04-22 20:54:57+00:00| seen| https://t.me/cvedetector/23538 2025-04-23 14:05:26+00:00| published-proof-of-concept|...
CVE-2025-29526
creationtimestamp| type| source ---|---|--- 2025-04-22 19:02:01+00:00| seen| https://gist.github.com/k4nt0r/6ee5bfe9215cb10a436a03c67cf908fd...
CVE-2025-29547
creationtimestamp| type| source ---|---|--- 2025-04-22 18:24:10+00:00| seen| https://t.me/cvedetector/23517 2025-04-22 19:09:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngewcrnyi2g 2025-04-22 20:05:13+00:00| published-proof-of-concept|...
CVE-2025-43949
MuM aka Mensch und Maschine MapEdit aka mapedit-web 24.2.3 is vulnerable to SQL Injection that allows an attacker to execute malicious SQL statements that control a web application's database server...
CVE-2025-28029
TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a buffer overflow vulnerability in cstecgi.cgi...
CVE-2025-32951 io.jmix.rest:jmix-rest allows XSS in the /files Endpoint of the Generic REST API
Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends...
CVE-2024-33452
An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...
CVE-2025-23176
creationtimestamp| type| source ---|---|--- 2025-04-22 16:14:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lng354qjhx2a 2025-04-22 17:49:12+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114382874171671792 2025-04-22 18:24:11+00:00| seen|...
CVE-2025-1950
CVE-2025-1950 affects IBM Hardware Management Console (Power Systems) versions V10.2.1030.0 and V10.3.1050.0. Description: local privilege escalation due to improper validation of libraries from an untrusted source, enabling a local user to execute commands. Root cause: untrusted-library validati...
CVE-2025-28034
creationtimestamp| type| source ---|---|--- 2025-04-22 14:03:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12841 2025-04-22 15:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfxbopzhr2b 2025-04-22 18:24:18+00:00| seen|...
CVE-2024-11299
The Memberpress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.37 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to...
WordPress Simple Download Counter plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Simple Download Counter versions = 2.2...
WordPress HTML Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin HTML Forms versions = 1.5.2...
CVE-2025-3458 Ocean Extra <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ocean_gallery_id'
The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oceangalleryid’ parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2025-46229
creationtimestamp| type| source ---|---|--- 2025-04-22 10:18:51+00:00| seen| https://bsky.app/profile/potato.software/post/3lnfhbtxjvp2n 2025-08-09 13:26:56+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:35+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27...
CVE-2025-46241
Cross-Site Request Forgery CSRF vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows SQL Injection.This issue affects Appointment Booking Calendar: from n/a through = 1.3.92...
CVE-2025-46241
creationtimestamp| type| source ---|---|--- 2025-04-22 10:03:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12826 2025-04-22 11:05:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6y4lx2b 2025-04-22 11:48:39+00:00| seen|...