WordPress Libro de Reclamaciones y Quejas plugin <= 1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Libro de Reclamaciones y Quejas versions = 1.0...

CVE-2025-3237

creationtimestamp| type| source ---|---|--- 2025-04-04 13:07:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyicieqdo2o 2025-04-04 14:40:22+00:00| seen| https://t.me/cvedetector/22114...

CVE-2025-2243

creationtimestamp| type| source ---|---|--- 2025-04-04 13:07:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyichhura26 2025-04-04 14:36:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10455 2025-04-04 14:40:23+00:00| seen| https://t.me/cvedetector/22116...

CVE-2025-3240

creationtimestamp| type| source ---|---|--- 2025-04-04 12:36:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10435 2025-04-04 13:07:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyiciu7o72z 2025-04-04 14:40:15+00:00| seen|...

CVE-2025-3239

creationtimestamp| type| source ---|---|--- 2025-04-04 12:36:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10434 2025-04-04 13:07:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyicibfx32u 2025-04-04 14:40:14+00:00| seen|...

CVE-2025-3235

creationtimestamp| type| source ---|---|--- 2025-04-04 09:35:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10421 2025-04-04 13:07:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyichx2372z 2025-04-04 14:40:29+00:00| seen|...

CVE-2025-21999

In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in procgetinode Fix race between rmmod and /proc/XXX's inode instantiation. The bug is that pde-procops don't belong to /proc, it belongs to a module, therefore dereferencing it after /proc entry has been registered...

CVE-2025-3198

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function displayinfo of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has...

CVE-2025-25001

creationtimestamp| type| source ---|---|--- 2025-04-04 00:35:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10373 2025-04-04 03:47:34+00:00| seen| https://t.me/cvedetector/22053 2025-04-04 05:06:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llxnhemd5g2i 2025-04-08...

openSUSE Security Advisory (openSUSE-SU-2025:0113-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:1094-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-3185

creationtimestamp| type| source ---|---|--- 2025-04-03 23:37:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10365 2025-04-04 01:11:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llxacu4sgg2x 2025-04-04 03:47:41+00:00| seen|...

WordPress Booster for WooCommerce plugin 4.0.1-7.2.4 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by luckybuddy in WordPress Plugin Booster for WooCommerce versions 4.0.1-7.2.4...

CVE-2025-31889

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in petesheppard84 Extensions for Elementor. This issue affects Extensions for Elementor: from n/a through 2.0.40...

CVE-2025-29064

creationtimestamp| type| source ---|---|--- 2025-04-03 21:06:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llwsmehahx2w 2025-04-03 23:36:21+00:00| seen| https://t.me/cvedetector/22022 2025-04-07 18:46:05+00:00| published-proof-of-concept|...

CVE-2025-3173

creationtimestamp| type| source ---|---|--- 2025-04-03 21:06:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llwsmeduo62o 2025-04-03 23:36:36+00:00| seen| https://t.me/cvedetector/22033...

winka.net Cross Site Scripting vulnerability OBB-4042152

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-31877

Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through = 3.2.8...

CVE-2024-4877

The OpenVPN GUI client on Windows is vulnerable to a privilege escalation attack in versions 2.4.0 through 2.6.10 . The root cause is a deficiency in access control when processing the SeImpersonatePrivilege parameter within the Interactive Service (iservice ). A lesser privileged process can cre...

CVE-2024-4877

OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges...