CGA-F7H5-3FXC-CW5J

Bulletin has no description...

WordPress AT Internet SmartTag plugin <= 0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin AT Internet SmartTag versions = 0.2...

WordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Wallet System for WooCommerce versions = 2.6.8...

CVE-2025-22279

creationtimestamp| type| source ---|---|--- 2025-04-10 11:32:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmhfsnp3bo2i 2025-04-10 13:41:25+00:00| seen| https://t.me/cvedetector/22646...

CVE-2025-30582

creationtimestamp| type| source ---|---|--- 2025-04-10 09:49:03+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114313037859036839...

CVE-2025-23386

creationtimestamp| type| source ---|---|--- 2025-04-10 09:48:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11218 2025-04-10 11:32:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmhfsnlebu2u 2025-04-10 13:41:24+00:00| seen| https://t.me/cvedetector/22644 2025-04-11...

CVE-2025-32114 WordPress 5sterrenspecialist plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 5sterrenspecialist 5sterrenspecialist allows Reflected XSS. This issue affects 5sterrenspecialist: from n/a through 1.3...

CGA-Q8XH-FG87-XG8P

Bulletin has no description...

CVE-2025-26330

creationtimestamp| type| source ---|---|--- 2025-04-10 05:30:42+00:00| seen| Telegram/q1v6fpd4crrHq44DB9Nj1uDJuUzOEqw5zlM7k7RhTjpY9VU 2025-04-10 06:59:52+00:00| seen| https://t.me/cvedetector/22619 2025-04-10 13:58:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114314020757340212...

TOTOLINK A6000R Command Injection Vulnerability

The TOTOLINK A6000R is a high performance wireless router. A command injection vulnerability exists in TOTOLINK A6000R. The vulnerability stems from the mishandling of the apclicancelwps function, and no detailed vulnerability details are provided at this time...

📄 Typecho 1.3.0 Cross Site Scripting

Typecho versions 1.3.0 and below suffer from a persistent cross site scripting vulnerability. // Exploit Title: Typecho = 1.3.0 Stored Cross-Site Scripting XSS // Google Dork: intext:"Powered by Typecho" inurl:/index.php // Date: 18/08/2024 // Exploit Author: Michele 'cyberaz0r' Di Bonaventura //...

Ubuntu: Security Advisory (USN-7429-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Typecho 1.3.0 - Stored Cross-Site Scripting (XSS)

Exploit Title: Typecho 1.3.0 - Stored Cross-Site Scripting XSS Google Dork: intext:"Powered by Typecho" inurl:/index.php Date: 18/08/2024 Exploit Author: Michele 'cyberaz0r' Di Bonaventura Vendor Homepage: https://typecho.org Software Link: https://github.com/typecho/typecho Version: 1.3.0 Tested...

PT-2025-15927 · Unknown · 5Sterrenspecialist

Name of the Vulnerable Software and Affected Versions: 5sterrenspecialist versions n/a through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For versions n/a...

CVE-2025-30645

creationtimestamp| type| source ---|---|--- 2025-04-09 23:28:20+00:00| seen| https://t.me/cvedetector/22602 2025-04-09 23:38:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmg5v3xe372i 2025-04-24 20:06:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13327...

CVE-2025-30651

creationtimestamp| type| source ---|---|--- 2025-04-09 20:22:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114309865308254607 2025-04-09 20:48:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11165 2025-04-09 23:28:13+00:00| seen| https://t.me/cvedetector/22596 2025-04-09...

CVE-2025-30660 Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS.When processing a high rate of specific GRE traffic destined to th...

CVE-2025-21595 Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause an FPC to crash, leading to Denial of Service DoS. On all Junos OS and Junos OS Evolved...

CVE-2025-3475

creationtimestamp| type| source ---|---|--- 2025-04-09 18:00:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114309307406934504 2025-04-09 18:48:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11133 2025-04-09 20:57:09+00:00| seen| https://t.me/cvedetector/22566...

WordPress FrescoChat Live Chat plugin <= 3.2.6 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin FrescoChat Live Chat versions = 3.2.6...