CVE-2024-13822

creationtimestamp| type| source ---|---|--- 2025-02-24 06:22:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5128 2025-02-24 07:55:30+00:00| seen| https://t.me/cvedetector/18780 2025-02-24 08:37:38+00:00| seen|...

CVE-2025-1617 Netis WF2780 Wireless 2.4G Menu cross site scripting

A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacte...

CVE-2025-22633

creationtimestamp| type| source ---|---|--- 2025-02-23 23:22:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5108 2025-02-24 02:04:26+00:00| seen| https://t.me/cvedetector/18764 2025-02-24 02:42:13+00:00| seen|...

CVE-2025-22633

CVE-2025-22633 is a vulnerability in the WordPress plugin Give – Divi Donation Modules (give-donation-modules-for-divi) affecting versions up to and including 2.0.0. The issue is described as an insertion of sensitive information into externally-accessible files or directories, enabling retrieval...

CVE-2025-1584

Solon up to 3.0.8 is affected by a path traversal in StaticMappings.java (StaticMappings.java) that can be triggered remotely via a ../filedir payload. Public exploit information exists; upgrading to 3.0.9 mitigates the issue. The patch is identified as f46e47fd1f8455b9467d7ead3cdb0509115b2ef1. A...

CVE-2025-1584 opensolon Solon StaticMappings.java path traversal

A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...

CVE-2024-55898

creationtimestamp| type| source ---|---|--- 2025-02-22 16:16:37+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lirprb5m2z2o 2025-02-23 09:18:28+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3litiuhjcfs2y 2025-02-24 02:21:31+00:00| seen|...

CVE-2024-47896

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

CVE-2025-1553

A vulnerability was found in pankajindevops scale up to 3633544a00245d3df88b6d13d9b3dd0f411be7f6. It has been classified as problematic. Affected is an unknown function of the file /scale/project. The manipulation of the argument goal leads to cross site scripting. It is possible to launch the...

CVE-2025-26622 sqrt doesn't define rounding behavior in Vyper

vyper is a Pythonic Smart Contract Language for the EVM. Vyper sqrt builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. This issue is being addressed a...

CVE-2024-13455

creationtimestamp| type| source ---|---|--- 2025-02-21 11:18:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4877 2025-02-21 15:26:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhtlpj2p 2025-02-21 15:35:58+00:00| seen| https://t.me/cvedetector/18655 2025-08-25...

CVE-2025-27098

GraphQL Mesh exposes a path traversal vulnerability in its staticFiles handler. When serve.staticFiles is configured, the code path does not reliably constrain absolutePath to the staticFiles directory, allowing access to files outside the intended directory. Affects GraphQL Mesh and related CLI/...

CVE-2025-25305

Home Assistant Core is an open source home automation that puts local control and privacy first. Affected versions are subject to a potential man-in-the-middle attacks due to missing SSL certificate verification in the project codebase and used third-party libraries. In the past,...

CVE-2025-26311

creationtimestamp| type| source ---|---|--- 2025-02-20 19:00:22+00:00| seen| https://t.me/cvedetector/18557 2025-02-20 20:51:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lin66yomuf23 2025-02-20 21:17:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4...

CVE-2025-1483 LTL Freight Quotes – GlobalTranz Edition <= 2.3.12 - Missing Authorization to Unauthenticated Settings Update

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engtzwdsavedropship AJAX endpoint in all versions up to, and including, 2.3.12. This makes it possible for unauthenticated attackers to...

CVE-2024-49355

creationtimestamp| type| source ---|---|--- 2025-02-20 06:27:30+00:00| seen| https://t.me/cvedetector/18509 2025-02-20 06:41:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lilooxcux22v 2025-02-20 23:26:53+00:00| seen| Telegram/v4AvuBwO3tFAZgc2DFjVweSGbv5LXWuUn-rWB0nVRe6TJ6DD...

CVE-2024-37359

creationtimestamp| type| source ---|---|--- 2025-02-20 01:48:26+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114033695465324291 2025-02-20 02:16:50+00:00| seen| https://t.me/cvedetector/18502 2025-02-20 02:26:13+00:00| seen|...

CVE-2024-54959

CVE-2024-54959 affects Nagios XI 2024R1.2.2. The issue is a Cross-Site Request Forgery (CSRF) via the Favorites component, enabling POST-based Cross-Site Scripting (XSS). The vulnerability arises from improper request validation in the Favorites feature, allowing an authenticated user to be trick...

CVE-2025-1075

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p27, 2.2.0p40, and 2.1.0p51 EOL causes LDAP credentials to be written to Apache error log file accessible to administrators...

CVE-2024-11778

The CanadaHelps Embedded Donation Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'embedcdn' shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...