55894 matches found
Security Bulletin: Information disclosure vulnerability affects IBM Business Automation Workflow - CVE-2024-38321
Summary IBM Business Automation Workflow is vulnerable to an information disclosure attack. Vulnerability Details CVEID:CVE-2024-38321 DESCRIPTION: IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log files under certain situations th...
GHSA-2MHX-5998-46HX
creationtimestamp| type| source ---|---|--- 2025-02-03 22:04:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113942216479395985 2025-02-13 19:09:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4294...
CVE-2025-24899
The CVE concerns reNgine, an automated reconnaissance framework for web apps. A flaw allows an insider with any role (e.g., Auditor, Penetration Tester, Sys Admin) to exfiltrate sensitive data from other reNgine users via a GET request to /api/listVulnerability/ after scanning targets. Affected d...
CVE-2025-24899
reNgine is an automated reconnaissance framework for web applications. A vulnerability was discovered in reNgine, where an insider attacker with any role such as Auditor, Penetration Tester, or Sys Admin can extract sensitive information from other reNgine users. After running a scan and obtainin...
CVE-2024-57968
creationtimestamp| type| source ---|---|--- 2025-02-03 19:16:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113941555703677096 2025-02-03 20:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhced4xduj2e 2025-02-03 20:37:54+00:00| seen|...
CVE-2024-38412
creationtimestamp| type| source ---|---|--- 2025-02-03 17:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc2akdrlr2f...
CVE-2025-24661
creationtimestamp| type| source ---|---|--- 2025-02-03 15:18:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtojbr6d2c 2025-02-03 16:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113940975827280277 2025-02-03 17:48:40+00:00| seen|...
CVE-2025-24639
creationtimestamp| type| source ---|---|--- 2025-02-03 15:18:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbto2wy3h2f 2025-02-03 17:48:46+00:00| seen| https://t.me/cvedetector/17067 2025-02-03 17:55:44+00:00| seen|...
CVE-2025-23984
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a through = 1.0...
CVE-2025-22681
creationtimestamp| type| source ---|---|--- 2025-02-03 14:40:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113940472158484998 2025-02-03 15:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtk4zk2w2i 2025-08-26 18:36:19+00:00| seen|...
CVE-2024-13347
creationtimestamp| type| source ---|---|--- 2025-02-03 06:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhavd4oufv2f 2025-02-03 09:27:14+00:00| seen| https://t.me/cvedetector/17056 2025-02-06 02:39:10+00:00| seen|...
CVE-2025-20636
creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaont2rcx2p 2025-02-03 07:46:47+00:00| seen| https://t.me/cvedetector/17045 2025-02-03 08:03:46+00:00| seen|...
WordPress Visitor Details plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Visitor Details versions = 1.0.1...
CVE-2025-0961
A vulnerability, which was classified as problematic, has been found in code-projects Job Recruitment 1.0. Affected by this issue is some unknown functionality of the file /parse/loadjob-details.php. The manipulation of the argument businessstreamname/companywebsiteurl leads to cross site...
CVE-2025-0945
creationtimestamp| type| source ---|---|--- 2025-02-01 15:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh4skmaksv2h 2025-02-01 16:16:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3769 2025-02-01 17:25:48+00:00|...
CGA-5GWF-JPVX-V6R7
Bulletin has no description...
CVE-2025-0365
creationtimestamp| type| source ---|---|--- 2025-02-01 06:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ug4gvpy2b 2025-02-01 07:16:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3724 2025-02-01 07:25:39+00:00| seen|...
CVE-2024-53296
creationtimestamp| type| source ---|---|--- 2025-02-01 04:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3nplnpkl2r 2025-02-01 05:25:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3708 2025-02-01 07:16:11+00:00| seen|...
CVE-2024-12184
creationtimestamp| type| source ---|---|--- 2025-02-01 04:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3np5fh7m2i 2025-02-01 05:25:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3714 2025-02-01 07:16:31+00:00| seen|...