CVE-2024-4620

creationtimestamp| type| source ---|---|--- 2025-05-29 09:42:55+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-4620.yaml 2025-05-31 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingchywa2c...

CVE-2020-24285

creationtimestamp| type| source ---|---|--- 2025-05-28 10:48:45+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-24285.yaml 2025-05-30 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqg4xgnsmk2v...

CVE-2023-38879

creationtimestamp| type| source ---|---|--- 2025-05-27 08:09:41+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-38879.yaml 2025-05-27 21:02:16+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lq6lkkrkoi22...

CVE-2024-2667

creationtimestamp| type| source ---|---|--- 2025-05-26 22:25:48+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-2667.yaml 2025-05-26 22:25:48+00:00| confirmed|...

CVE-2024-48251

Wavelog 1.8.5 allows Activatedgridmapmodel.php getbandconfirmed SQL injection via band, sat, propagation, or mode...

PT-2025-61: Stored Cross-site scripting in FreeScout

The vulnerability was identified in FreeScout , versions v.1.8.173 and 1.8.174. The discovered vulnerability allows an attacker to store malicious HTML/JavaScript scripts that is later executed in other users’ browsers due to insufficient input validation and sanitization. Vulnerability status:...

PT-2025-52: Business Logic Errors in FreeScout

The vulnerability was identified in FreeScout, versions v.1.8.173 and 1.8.174. The discovered vulnerability allows an attacker to gain access to a functional capability without completing the required sequence of actions, bypassing the intended business workflow. Vulnerability status: Confirmed b...

PT-2025-47: Insufficient authorization in FreeScout

The vulnerability was identified in FreeScout , versions v.1.8.173 and 1.8.174. The discovered vulnerability allows an attacker to access information or functionality that exceeds the privileges granted to the user because the application checks access rights incorrectly. Vulnerability status:...

PT-2025-46: Insufficient authorization in FreeScout

The vulnerability was identified in FreeScout, versions v.1.8.173 and 1.8.174. The discovered vulnerability allows an attacker to access information or functionality that exceeds the privileges granted to the user because the application checks access rights incorrectly. Vulnerability status:...

PT-2025-45: Arbitrary file upload in FreeScout

The vulnerability was identified in FreeScout, versions v.1.8.173 and 1.8.174. The discovered vulnerability allows an attacker to upload arbitrary including executable files containing malicious code because the application does not perform sufficient validation of uploaded files. Vulnerability...

CVE-2021-25161

creationtimestamp| type| source ---|---|--- 2025-05-21 12:32:30+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25161.yaml 2025-05-22 21:02:15+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lprz7wigti2s...

PT-2025-43: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, versions v.1.8.173 and 1.8.174. The discovered vulnerability allows an attacker to execute arbitrary code on the server because the application performs insufficient validation of user‑supplied data during deserialization. Vulnerability status:...

CVE-2024-2473

creationtimestamp| type| source ---|---|--- 2025-05-15 07:24:21+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-2473.yaml 2025-05-15 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lpafxtmgqd2a 2026-01-27...

CVE-2022-42118

creationtimestamp| type| source ---|---|--- 2025-05-03 16:34:09+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-42118.yaml 2025-05-05 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lohbckkmji2n...

CVE-2024-13322

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14433 2025-05-02 07:34:50+00:00| seen| https://t.me/cvedetector/24323 2025-05-02 13:06:20+00:00| confirmed|...

CVE-2025-2907

creationtimestamp| type| source ---|---|--- 2025-04-26 06:08:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13566 2025-04-26 07:25:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnp7ep2ivca2 2025-04-26...

PT-2025-10: Server-Side Request Forgery (SSRF) in HTML2PDF

The application performs insufficient validation of the destination address before sending an HTTP request. The vulnerability exploitation leads to the disclosure of sensitive data, denial of service, and etc. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 25.04.2025...

PT-2025-11: Server-Side Request Forgery (SSRF) in HTML2PDF

During the analysis of the HTML2PDF library version 5.3.1, despite the existence of the defense mechanism that was implemented to validate source image paths, a vulnerability allowing SSRF execution was found. The application performs insufficient validation of the destination address before...

linkatomic.com Cross Site Scripting vulnerability OBB-4048293

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-35: Local Privilege Escalation (LPE) in Tunnelblick

The vulnerability was identified in Tunnelblick, versions 3.5beta06 to 6.1beta2. The discovered vulnerability allows an attacker to escalate privileges from a normal user to root. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 22.04.2025 Recommendations: Update to...