CVE-2025-32694

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Phishing.This issue affects Ultimate WP Mail: from n/a through = 1.3.10...

CVE-2025-32680

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Grade Us, Inc. Review Stream review-stream allows Stored XSS.This issue affects Review Stream: from n/a through = 1.6.7...

CVE-2025-32616

Cross-Site Request Forgery CSRF vulnerability in nimbata Nimbata Call Tracking nimbata-call-tracking allows Stored XSS.This issue affects Nimbata Call Tracking: from n/a through = 1.8.0...

CVE-2025-32068

creationtimestamp| type| source ---|---|--- 2025-04-11 17:32:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114320523948394256 2025-04-11 19:43:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkroqtege2z 2025-04-11 20:38:20+00:00| seen| https://t.me/cvedetector/227...

CVE-2025-31388

Cross-Site Request Forgery CSRF vulnerability in doa The World the-world allows Stored XSS.This issue affects The World: from n/a through = 0.4...

CVE-2025-32075 IP and user agent leaks in Extension:Tabs

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43...

CVE-2025-32069

The CVE-2025-32069 issue is an Improper Input Validation vulnerability in the Wikimedia Foundation’s MediaWiki Wikibase Media Info Extension, affecting versions 1.39 through 1.43. The root cause involves input validation flaws leading to Cross-Site Scripting (XSS) . Connected sources corroborate ...

CVE-2025-32071 Wikibase CommonsInlineImageFormatter: i18n XSS

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scripting XSS from widthheight message via ImageHandler::getDimensionsStringThis issue affects Mediawiki - Wikidata Extension: from 1.39 through 1.43...

CVE-2025-3422

creationtimestamp| type| source ---|---|--- 2025-04-11 15:37:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkdycbkqg2g 2025-04-11 16:27:14+00:00| seen| https://t.me/cvedetector/22746...

CVE-2023-42970

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution...

CVE-2023-41076

An app may be able to elevate privileges. This issue is fixed in macOS 14. This issue was addressed by removing the vulnerable code...

CVE-2023-41076

An app may be able to elevate privileges. This issue is fixed in macOS 14. This issue was addressed by removing the vulnerable code...

WordPress Booking and Rental Manager plugin <= 2.2.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Booking and Rental Manager versions = 2.2.8...

CVE-2024-13861

creationtimestamp| type| source ---|---|--- 2025-04-11 14:06:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114319711347166542 2025-04-11 15:37:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkdybtpof2j 2025-04-11 16:27:15+00:00| seen| https://t.me/cvedetector/227...

CVE-2025-3421

The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping...

CVE-2024-52280

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to watch resources they are not allowed to access, when they have at least some generic permissions on the type. This issue affects rancher: before 2175e09, before 6e30359, before c744f0b...

CVE-2025-2575

creationtimestamp| type| source ---|---|--- 2025-04-11 11:50:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11414 2025-04-11 15:37:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkdybqlrg2g 2025-04-11 16:27:17+00:00| seen| https://t.me/cvedetector/22750...

CVE-2025-32568

creationtimestamp| type| source ---|---|--- 2025-04-11 11:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114319170889184516...

CVE-2025-23388

CVE-2025-23388 affects SUSE Rancher with a stack-based buffer overflow that can cause denial of service. Affected versions are 2.8.0–2.8.13, 2.9.0–2.9.7, and 2.10.0–2.10.3. The CVE is described as an unauthenticated stack overflow in the /v3-public/authproviders API. Remediation is to upgrade to ...

CVE-2025-31932

Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console. The vendor provides the workaround information and recommends to apply it to the deployment environment...