CVE-2025-0717

creationtimestamp| type| source ---|---|--- 2025-03-25 06:23:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8600 2025-03-25 08:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va2zzvb24 2025-03-25 09:27:42+00:00| seen| https://t.me/cvedetector/21065...

CVE-2024-10554

CVE-2024-10554 affects the WordPress plugin WP-Advanced-Search prior to version 3.3.9.3. Root cause: certain settings are not properly sanitised/escaped, enabling Stored XSS by high-privilege users (e.g., admins), even when unfiltered_html is disallowed (notably in multisite setups). Impact is st...

Exploit for CVE-2024-31114

CVE-2024-31114 - WordPress Shortcode Addons RCE Exploit Sho...

CVE-2025-25364

creationtimestamp| type| source ---|---|--- 2025-03-24 14:43:11+00:00| seen| https://infosec.exchange/users/threatcodex/statuses/114217935883108579 2025-04-18 18:28:17+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ln4arcbktd2z 2025-04-18 20:24:32+00:00| seen|...

[SECURITY] [DLA 4089-1] libxslt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4089-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 24, 2025 https://wiki.debian.org/LTS -...

Debian dsa-5884 : libxslt1-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5884 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5884-1 [email protected] https://www.debian.org/securit...

[SECURITY] [DSA 5883-1] mercurial security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5883-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 22, 2025 https://www.debian.org/security/faq -...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071-Exploit - Đây chỉ là tài liệu mang tính chấ...

WordPress iSpring Embedder 1.0 CSRF / Shell Upload

WordPress iSpring Embedder plugin versions 1.0 and below suffer from a cross site request forgery vulnerability that can be leveraged to upload a PHP web shell. CVE-2025-23922 - WordPress iSpring Embedder CSRF to Arbitrary File Upload 📌 CVE Details - CVE ID: CVE-2025-23922 - Published: 2025-01-16...

[SECURITY] [DSA 5882-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5882-1 [email protected] https://www.debian.org/security/ Andres Salomon March 20, 2025 https://www.debian.org/security/faq -...

CVE-2025-2555

creationtimestamp| type| source ---|---|--- 2025-03-20 18:20:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8250 2025-03-20 21:04:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxaqdwj26 2025-03-20 21:35:05+00:00| seen|...

CVE-2024-8021

An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application, which results in a 302 redirect to an...

CVE-2024-7983 Denial of Service in open-webui/open-webui

In version 0.3.8 of open-webui, an endpoint for converting markdown to HTML is exposed without authentication. A maliciously crafted markdown payload can cause the server to spend excessive time converting it, leading to a denial of service. The server becomes unresponsive to other requests until...

CVE-2024-9606

CVE-2024-9606 — Improper API key masking in Litellm A vulnerability in berriai/litellm prior to 1.44.12 arises from the masking logic in litellm_logging.py, which only masks the first 5 characters of API keys. This allows leakage of most of the secret key in logs, as noted for version v1.44.9 and...

CVE-2025-2532

creationtimestamp| type| source ---|---|--- 2025-03-20 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-175/ 2025-03-25 14:24:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8658 2025-03-25 17:49:13+00:00| seen| https://t.me/cvedetector/21104...

CVE-2024-50631

CVE-2024-50631 affects Synology Drive Server; the system syncing daemon is vulnerable to SQL injection due to improper neutralization of special elements in SQL commands. Versions affected include before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102. The vulnerability can allow remote att...

AIX is vulnerable to arbitrary command execution (CVE-2024-56346 CVE-2024-56347)

IBM SECURITY ADVISORY First Issued: Tue Mar 18 10:46:14 CDT 2025 |Updated: Thu Apr 10 09:01:49 CDT 2025 |Update: The included README was updated for clarity. The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/nimadvisory.asc Security...

Advisory ROSA-SA-2025-2780

Software: pixman 0.38.4 OS: ROSA Virtualization 2.1 packageevrstring: pixman-0.38.4-4.rv3 CVE-ID: CVE-2020-35492 BDU-ID: 2021-03445 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the image-compositor.c component of the Cairo vector graphics library is related to a data stack buffer overflow...

Advisory ROSA-SA-2025-2775

Software: c-ares 1.13.0 OS: ROSA Virtualization 2.1 packageevrstring: c-ares-1.13.0-11.rv3 CVE-ID: CVE-2020-22217 BDU-ID: 2023-05898 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the aresparsesoareply function of the C-ares asynchronous DNS query library is related to an operation exceeding...

[SECURITY] [DSA 5879-1] opensaml security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5879-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 16, 2025 https://www.debian.org/security/faq -...