CVE-2025-24506

Broadcom Symantec Privileged Access Management (PAM) is cited as affected by CVE-2025-24506. The connected PT-2025-5378 entry states: a specific authentication strategy allows learning the IDs of PAM users associated with certain authentication types, but it does not specify affected versions and...

CVE-2025-0743

creationtimestamp| type| source ---|---|--- 2025-01-30 12:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhlvhjlw27 2025-01-30 14:15:55+00:00| seen| https://t.me/cvedetector/16759 2025-01-30 15:24:55+00:00| seen|...

CVE-2023-35017

creationtimestamp| type| source ---|---|--- 2025-01-29 00:09:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113908735032933642 2025-01-29 00:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtouectig2n 2025-01-29 01:10:00+00:00| seen|...

CVE-2024-45336

The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however,...

CVE-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

CVE-2025-23756 WordPress LawPress plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ivanchernyakov LawPress – Law Firm Website Management lawpress allows Reflected XSS.This issue affects LawPress – Law Firm Website Management: from n/a through = 1.4.5...

CVE-2024-35111

creationtimestamp| type| source ---|---|--- 2025-01-25 13:35:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113889257478861428 2025-01-25 14:05:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3083 2025-01-25 17:06:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3104...

CVE-2025-24704

creationtimestamp| type| source ---|---|--- 2025-01-24 21:47:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113885526576461511...

CVE-2025-24644

creationtimestamp| type| source ---|---|--- 2025-01-24 19:47:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113885054196668289...

CVE-2023-37019

Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an S1Setup Request message missing a required Supported TAs field to repeatedly crash the MME, resulting in denial of service...

CVE-2025-23692

creationtimestamp| type| source ---|---|--- 2025-01-16 20:19:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv43agb5q2t 2025-01-16 22:05:52+00:00| seen| https://t.me/cvedetector/15634 2025-01-17 00:23:22+00:00| seen|...

CVE-2024-50858

creationtimestamp| type| source ---|---|--- 2025-01-15 00:03:19+00:00| seen| https://t.me/cvedetector/15376 2025-01-15 17:48:23+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113833626963845673...

CVE-2025-21340

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpumfgz4o2t 2025-01-15 01:56:35+00:00| seen|...

CVE-2024-52963

A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets...

CVE-2024-43657

creationtimestamp| type| source ---|---|--- 2025-01-09 08:16:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/912 2025-01-09 08:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcagnja4m2d 2025-01-09 08:32:54+00:00| seen|...

CVE-2023-27531

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code...

CVE-2024-56409

creationtimestamp| type| source ---|---|--- 2025-01-03 16:52:48+00:00| published-proof-of-concept| https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-j2xg-cjcx-4677 2025-01-03 17:09:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113765525095900326 2025-01-03...

CVE-2024-38753

creationtimestamp| type| source ---|---|--- 2025-01-02 12:19:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2r2intb2l 2025-01-02 18:38:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113760213893345582...

CVE-2023-46073

creationtimestamp| type| source ---|---|--- 2025-01-02 12:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2khydzn2i 2025-01-02 13:08:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113758914788883417...

CVE-2024-56045

creationtimestamp| type| source ---|---|--- 2024-12-31 13:28:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113747671612296235 2024-12-31 14:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemad2vb6i2k 2024-12-31 16:13:22+00:00| seen|...