PT-2025-6098 · Perfood · Couch-Auth

Name of the Vulnerable Software and Affected Versions: perfood/couch-auth versions = 0.21.2 Description: A host header injection vulnerability exists in the NPM package of perfood/couch-auth. By sending a specially crafted host header in the email change confirmation request, it is possible to...

CVE-2022-30755

Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent...

CVE-2025-1025

creationtimestamp| type| source ---|---|--- 2025-02-05 05:08:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113949546311391296 2025-02-05 05:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvmo2252f 2025-02-05 07:26:56+00:00| seen|...

CVE-2025-24906

creationtimestamp| type| source ---|---|--- 2025-02-03 21:49:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113942157461874885 2025-02-03 22:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhckywoopj2c 2025-02-03 23:40:52+00:00| seen|...

CVE-2024-55416

creationtimestamp| type| source ---|---|--- 2025-01-30 15:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnocmz42i 2025-01-30 16:00:07+00:00| seen| https://t.me/truesecator/6678 2025-01-30 18:12:23+00:00| published-proof-of-concept|...

CVE-2025-23057

creationtimestamp| type| source ---|---|--- 2025-01-28 17:18:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113907118853381345 2025-01-28 18:16:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgt2s7n2ai2j 2025-01-28 19:09:06+00:00| seen|...

CVE-2024-54507

creationtimestamp| type| source ---|---|--- 2025-01-23 22:42:05+00:00| seen| https://bsky.app/profile/hn100.bsky.social/post/3lggxcviw4y2c 2025-01-23 22:45:51+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3lggxjneluj25 2025-01-23 22:51:40+00:00| seen|...

CVE-2024-49742

In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed f...

CVE-2024-13496

creationtimestamp| type| source ---|---|--- 2025-01-21 23:07:42+00:00| seen| https://bsky.app/profile/abrahack.bsky.social/post/3lgbxsnqgxs2s 2025-01-22 11:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdaiqmrjn2j 2025-01-22 11:44:34+00:00| seen|...

PT-2025-2283 · Oracle · Jd Edwards Enterpriseone Tools

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools versions prior to 9.2.9.0 Description: The issue is related to a component of the JD Edwards EnterpriseOne Tools system, specifically the Business Logic Infra SEC, which has a flaw in its data source confirmatio...

CVE-2024-50967

creationtimestamp| type| source ---|---|--- 2025-01-16 22:00:05+00:00| published-proof-of-concept| Telegram/qbRDczufhEAwfoxE7jsw2afVmX33EpB44LRknpUqHzmwaHs 2025-01-17 14:57:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113844279598243025 2025-01-17 15:15:51+00:00| seen|...

CVE-2024-7097

creationtimestamp| type| source ---|---|--- 2025-01-15 12:42:27+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-7097.yaml 2025-01-19 21:02:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg4pub2zlq2x 2025-02-02...

CVE-2024-12527

creationtimestamp| type| source ---|---|--- 2025-01-11 07:57:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113808655798870020 2025-01-11 08:03:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1280 2025-01-11 08:16:10+00:00| seen|...

CVE-2024-55218

creationtimestamp| type| source ---|---|--- 2025-01-07 19:57:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113788836453836260 2025-01-07 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6hozzsjx2e 2025-01-07 20:39:25+00:00|...

CVE-2024-48245

Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name", and "Payment Confirmation ID", which...

CVE-2024-48245

Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name", and "Payment Confirmation ID", which...

CVE-2024-55556

creationtimestamp| type| source ---|---|--- 2025-01-07 16:07:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113787932627494304 2025-01-07 16:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62crdegm2i 2025-03-12 04:51:28+00:00| confirmed|...

CVE-2025-22385

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email confirmation. This medium-severity issue allows the mass creation of accounts. This could affect database storage; also, non-requested...

CVE-2025-22385

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email confirmation. This medium-severity issue allows the mass creation of accounts. This could affect database storage; also, non-requested...

PT-2025-4481 · Optimizely · Optimizely Configured Commerce

Name of the Vulnerable Software and Affected Versions: Optimizely Configured Commerce versions prior to 5.2.2408 Description: An issue was discovered in Optimizely Configured Commerce where the Commerce B2B application does not require email confirmation for newly created accounts. This allows th...