WordPress aBlocks plugin <= 1.9.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy Patchstack Alliance in WordPress Plugin aBlocks versions = 1.9.2...

CVE-2025-20977

creationtimestamp| type| source ---|---|--- 2025-05-07 12:23:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lolakkb67el2 2025-05-07 13:09:07+00:00| seen| https://t.me/cvedetector/24692...

CVE-2025-20980

The CVE-2025-20980 entry concerns Samsung/libsavscmn with an out-of-bounds write that leads to memory corruption on devices running Android prior to 15. Affected component: libsavscmn (memory corruption vulnerability). Root cause: out-of-bounds write. Impact: local attackers could trigger memory ...

Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907)

Summary IBM WebSphere Application Server is vulnerable to server-side request forgery. Following IBM® Engineering Lifecycle Engineering product is vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Test Management. Vulnerability Details Refer to the security...

CVE-2025-3852

creationtimestamp| type| source ---|---|--- 2025-05-07 02:21:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15243 2025-05-07 04:26:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokkl3evr62l 2025-05-07 05:31:29+00:00| seen|...

CVE-2025-4220

creationtimestamp| type| source ---|---|--- 2025-05-07 02:21:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15239 2025-05-07 04:26:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokkl2wob42e 2025-05-07 07:12:44+00:00| seen| https://t.me/cvedetector/24663...

PT-2025-20234

Name of the Vulnerable Software and Affected Versions Graylog versions prior to 6.0.14 Graylog versions prior to 6.1.10 Graylog versions prior to 6.2.0 Description Graylog is a log management platform. An issue exists where user session cookies can be obtained by submitting an HTML form within an...

Ensure That Warning Banners Contain Proper Information

Warning banners contain warning information added on the system login page. Security warnings are displayed for all users who log in to the system. The security warnings must include information about the organization to which the system belongs, monitoring or records of login behavior, and legal...

COVID19 Testing Management System test-details.php File SQL Injection Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Status in the /test-details.php...

WordPress plugin Awesome Gallery has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Awesome Gallery plugin, which stems from the application's lack of effective filtering and escaping of user-supplied...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1422)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress plugin aBlocks has cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress aBlocks plugin, which stems from the application's lack of effective filtering and escaping of user-supplied data, and n...

WordPress plugin: Amazon Product in a Post – Cross-site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Amazon Product in a Post plugin, which stems from the application's lack of effective filtering and escaping of...

Ubuntu: Security Advisory (USN-7496-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for CVE-2025-1974

CVE-2025-1974IngressNightmare poc IngressNightmare Script...

CVE-2025-21813

creationtimestamp| type| source ---|---|--- 2025-05-06 22:09:33+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lojvjhxzy22t...

WordPress Multiple Post Type Order plugin <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mpto Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via mpto Shortcode vulnerability discovered by Gilang in WordPress Plugin Multiple Post Type Order versions = 1.10.0...

CVE-2025-2898

creationtimestamp| type| source ---|---|--- 2025-05-06 17:46:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114462136252821396 2025-05-06 18:39:52+00:00| seen| https://t.me/cvedetector/24615 2025-05-07 04:21:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15253...

CVE-2025-32022

Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects...

CVE-2025-45492

creationtimestamp| type| source ---|---|--- 2025-05-06 16:22:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15160 2025-05-06 18:21:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis6w75p2w 2025-05-06 20:20:27+00:00| seen|...