CVE-2025-24858

Develocity formerly Gradle Enterprise before 2024.3.1 allows an attacker who has network access to a Develocity server to obtain the hashed password of the system user. The hash algorithm used by Develocity was chosen according to best practices for password storage and provides some protection...

CVE-2025-24716

creationtimestamp| type| source ---|---|--- 2025-01-24 22:17:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113885644683146916...

CVE-2025-24725

creationtimestamp| type| source ---|---|--- 2025-01-24 20:16:10+00:00| seen| https://t.me/cvedetector/16332 2025-01-24 22:47:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113885762803250461...

CVE-2025-24750

creationtimestamp| type| source ---|---|--- 2025-01-24 20:15:55+00:00| seen| https://t.me/cvedetector/16321 2025-01-24 23:32:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113885939949437241...

CVE-2025-0703

CVE-2025-0703 affects JoeyBling bootplus; path traversal is triggered by manipulating the name argument in SysFileController.java. The issue can be exploited remotely and the exploit has been disclosed publicly. The product reportedly does not use versioning, so public details about affected vs. ...

CVE-2025-24573

creationtimestamp| type| source ---|---|--- 2025-01-24 18:16:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113884699874417032...

CVE-2025-24724 WordPress Side Menu Lite Plugin <= 5.3.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Side Menu Lite allows Cross Site Request Forgery. This issue affects Side Menu Lite: from n/a through 5.3.1...

CVE-2025-21499

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2023-46401

KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function...

CVE-2024-50665

gpac 2.4 contains a SEGV at src/isomedia/drmsample.c:1562:96 in isomcencgetsaibysaizsaio in MP4Box...

CVE-2024-55929 Mail spoofing

A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources...

CVE-2024-55928 Clear text secrets returned & Remote system secrets in clear text

Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely. This vulnerability allows attackers to intercept or access secrets without encryption...

CVE-2024-2617

creationtimestamp| type| source ---|---|--- 2025-01-23 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-02 2026-02-14 11:56:07+00:00| seen| https://bsky.app/profile/ravirockks.bsky.social/post/3mesxnxujp72v 2026-02-14 11:56:08+00:00| seen|...

CVE-2025-24530

An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted table or database name could be used for XSS...

CVE-2024-57721

CVE-2024-57721 concerns lunasvg v3.0.0 where a segmentation fault occurs in the plutovg_path_add_path path. The Fedora advisories link this to the lunasvg/plutovg integration, and recommend unbundling plutovg from lunasvg, updating lunasvg to use the plutovg version already in the repository, and...

CVE-2025-0650

A flaw was found in the Open Virtual Network OVN. Specially crafted UDP packets may bypass egress access control lists ACLs in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized...

CVE-2025-24529

An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the Insert tab...

CVE-2025-0611

creationtimestamp| type| source ---|---|--- 2025-01-22 19:03:32+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113873558659039214 2025-01-22 20:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lge6oshxps2e 2025-01-22 20:35:00+00:00| seen|...

CVE-2024-51457 IBM Robotic Process Automation for Cloud Pak cross-site scripting

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

CVE-2025-23769

creationtimestamp| type| source ---|---|--- 2025-01-22 15:20:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo6qoedp2p 2025-01-23 17:03:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2767...