55893 matches found
CVE-2025-3645 Moodle: idor in messaging web service allows access to some user details
A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses...
CVE-2025-3645 Moodle: idor in messaging web service allows access to some user details
A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses...
CVE-2025-3640
CVE-2025-3640 describes an IDOR in Moodle’s web service: users enrolled in a course can access other users’ details (e.g., full name and profile image URL) due to insufficient capability checks. The connected documents (BIT-MOODLE-2025-3640, OSV:GHSA-6G5X-H5X7-Q4MQ, OSV/CIRCL sightings, CNVD) con...
CVE-2025-46546
creationtimestamp| type| source ---|---|--- 2025-04-25 03:06:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13368 2025-04-25 04:04:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmdoxjvfxr2 2025-04-25...
D-Link DIR-816 A2 Command Injection Vulnerability
The D-Link DIR-816 A2 is a home and small office SOHO wireless router from D-Link. A command injection vulnerability exists in the D-Link DIR-816 A2. The vulnerability originates in the /goform/delRouting path. No detailed vulnerability details are provided at this time...
PT-2025-17894 · WordPress · 1 Decembrie 1918
Name of the Vulnerable Software and Affected Versions: 1 Decembrie 1918 plugin for WordPress versions up to, and including, 1.dec.2012 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the "1-decembrie-1918/1-decembrie-1918.php" page...
Growatt Cloud Applications Information Disclosure Vulnerability
Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to query API endpoints and obtain device details...
Ubuntu: Security Advisory (USN-7455-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Prevent Direct Access plugin 2.8.6-2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions vulnerability
Incorrect Authorization to Authenticated Contributor+ Multiple Media Actions vulnerability discovered by 0xbro in WordPress Plugin Prevent Direct Access versions 2.8.6-2.8.8.2...
WordPress Tooltip plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by johska in WordPress Plugin Tooltip versions = 1.0.1...
WordPress SCSS-Library plugin <= 0.4.1 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin SCSS-Library versions = 0.4.1...
CVE-2025-27820
creationtimestamp| type| source ---|---|--- 2025-04-24 12:06:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13216 2025-04-24 13:09:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114393098223959645 2025-04-24 14:16:47+00:00| seen|...
CVE-2025-3607
creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13204 2025-04-24 10:15:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkhz7moqe2h 2025-04-24 11:48:23+00:00| seen|...
CVE-2025-46375
creationtimestamp| type| source ---|---|--- 2025-04-24 05:15:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnjxadfboe2t 2025-04-24 07:12:38+00:00| seen| https://t.me/cvedetector/23636...
CVE-2024-38541
creationtimestamp| type| source ---|---|--- 2025-04-24 02:01:18+00:00| seen| https://gist.github.com/somprasongd/7e70d4aeffa65e3b65b61db9baeb480f 2025-05-09 08:25:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15707...
PT-2025-17695 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability has been identified, but details are not provided in the given descriptions. No information is available about the estimated number of potentially affected devices worldwide ...
PT-2025-17693 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not explicitly mentioned. There is no information about the estimated number of potentially affected devices worldwide or details about real-world...
PT-2025-17698 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. No estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited are...
CVE-2025-25046
creationtimestamp| type| source ---|---|--- 2025-04-23 23:05:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13159 2025-04-24 01:14:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjssojuq2d 2025-04-24 03:01:44+00:00| seen| https://t.me/cvedetector/23624...
