GHSA-2X8X-JMRP-PHXW

creationtimestamp| type| source ---|---|--- 2025-03-04 05:49:27+00:00| seen| https://gist.github.com/saburi-pp/237b36513b29209ae31133136478b20e 2025-04-22 16:03:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12881...

CVE-2025-27219

creationtimestamp| type| source ---|---|--- 2025-03-04 00:31:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6302 2025-03-04 01:36:54+00:00| seen| https://t.me/cvedetector/19433 2025-03-04 02:54:48+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2018-1000078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier,...

Ubuntu: Security Advisory (USN-7316-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Teachers Record Management System 2.1 SQL Injection

Teachers Record Management System version 2.1 suffers from a remote SQL injection vulnerability. Exploit Title: Teachers Record Management System v2.1 | Authenticated Time-Based SQLi Date: 2025-03-04 Exploit Author: Mehmet Can Kadıoğlu a.k.a mao7un Vendor:...

PT-2025-14320

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the drm/xe/hmm component. The issue involves dereferencing struct page pointers without holding the notifier lock, which...

Linux Distros Unpatched Vulnerability : CVE-2017-9184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a cannot be represented in type int issue in input-bmp.c:314:7. CVE-2017-9184 Note that Nessus relies on the presence of...

CVE-2025-25967

creationtimestamp| type| source ---|---|--- 2025-03-03 20:49:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7avpne22 2025-03-03 21:24:34+00:00| seen| https://t.me/cvedetector/19396...

CVE-2025-27094

creationtimestamp| type| source ---|---|--- 2025-03-03 18:44:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7h27tx2b 2025-08-19 13:26:46+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

Security Bulletin: Denial of Service vulnerability in WebSphere Liberty affects IBM Business Automation Workflow - CVE-2024-40094

Summary IBM WebSphere Application Server Liberty is shipped as a component of IBM Business Automation Workflow Process Federation Server and User Management Service. IBM WebSphere Application Server Liberty is also the foundation of many images in IBM Business Automation Workflow on Containers. I...

CVE-2025-27094 Tuleap allows default values to be cleared from field configuration

Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute...

CVE-2025-25131

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in randyjensen RJ Quickcharts rj-quickcharts allows Stored XSS.This issue affects RJ Quickcharts: from n/a through = 0.6.1...

CVE-2025-25132

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ravi Singh Visitor Details visitors-details allows Stored XSS.This issue affects Visitor Details: from n/a through = 1.0.1...

CVE-2025-25132 WordPress Visitor Details plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ravi Singh Visitor Details allows Stored XSS. This issue affects Visitor Details: from n/a through 1.0.1...

CVE-2025-25132 WordPress Visitor Details plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ravi Singh Visitor Details visitors-details allows Stored XSS.This issue affects Visitor Details: from n/a through = 1.0.1...

CVE-2025-25132

CVE-2025-25132 is a stored XSS in the WordPress plugin Visitor Details (versions

CVE-2025-25084

The CVE-2025-25084 entry concerns the WordPress UniTimetable plugin, affected versions are

Security Bulletin: Vulnerability in Spring Framework affects IBM SPSS Collaboration and Deployment Services (CVE-2023-20863)

Summary Vulnerability in Spring Framework affects IBM SPSS Collaboration and Deployment Services CVE-2023-20863 Vulnerability Details CVEID:CVE-2023-20863 DESCRIPTION: In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially...

CVE-2025-1876

creationtimestamp| type| source ---|---|--- 2025-03-03 12:31:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114098509796592852 2025-03-03 19:44:06+00:00| seen| https://t.me/cvedetector/19378 2025-03-04 16:31:43+00:00| published-proof-of-concept|...

CVE-2025-0655

creationtimestamp| type| source ---|---|--- 2025-03-03 12:12:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dtalercecve20250655.rb 2025-03-04 02:34:30+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-03-04 21:02:01+00:00| seen|...