CVE-2025-23752 WordPress CGD Arrange Terms plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Clifton Griffin CGD Arrange Terms shopp-arrange allows Reflected XSS.This issue affects CGD Arrange Terms: from n/a through = 1.1.3...

CVE-2025-24533

CVE-2025-24533 : WordPress MetaSlider plugin (Responsive Slider) contains a Cross-Site Request Forgery (CSRF) vulnerability affecting versions prior to 3.92.0. The issue, observed in MetaSlider Responsive Slider by MetaSlider, enables CSRF as described in vendor/curation sources. Mitigation is to...

PT-2025-20743 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.6 macOS versions prior to 14.7.6 macOS versions prior to 15.3 Description: The issue was addressed with improved memory handling. An app may be able to disclose kernel memory. Recommendations: For macOS versions...

CVE-2024-56959

The Mashang Consumer Finance Co., Ltd Anyihua lending platform is vulnerable in iOS version 3.6.2 . An attacker can exploit this issue by supplying a crafted link to gain access to sensitive user information . This vulnerability is associated with CWE-601 (URL Redirection to Untrusted Site) and C...

PT-2025-31666 · Alpine · Alpine Ilx-507

Name of the Vulnerable Software and Affected Versions: Alpine iLX-507 affected versions not specified Description: A stack-based buffer overflow vulnerability exists in the Apple CarPlay protocol implementation of the Alpine iLX-507. This flaw allows a physically present attacker to execute...

CVE-2024-31906

IBM Automation Decision Services 23.0.2 contains an information-disclosure vulnerability where web pages can be stored locally and read by another user on the same system. Affected product/version: IBM Automation Decision Services 23.0.2. Root cause: storage of web content locally enabling access...

CVE-2024-13450

creationtimestamp| type| source ---|---|--- 2025-01-25 08:29:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113888054113670556 2025-01-25 09:04:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3070 2025-01-25 12:09:15+00:00| seen| https://t.me/cvedetector/16384 2025-02-06...

CVE-2024-12512

creationtimestamp| type| source ---|---|--- 2025-01-25 07:28:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113887813202332113 2025-01-25 08:05:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3068 2025-01-25 10:29:00+00:00| seen| https://t.me/cvedetector/16380...

CVE-2024-12076

creationtimestamp| type| source ---|---|--- 2025-01-25 07:28:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113887813133186587 2025-01-25 08:05:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3067 2025-01-25 10:28:58+00:00| seen|...

CVE-2024-55228

creationtimestamp| type| source ---|---|--- 2025-01-25 04:09:52+00:00| exploited| https://gist.github.com/Dqtdqt/a942bbce9a5fc851dce366902411c768 2025-01-27 16:36:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113901292435622561 2025-01-27 17:16:06+00:00| seen|...

CVE-2025-24360

creationtimestamp| type| source ---|---|--- 2025-01-24 23:51:14+00:00| published-proof-of-concept| https://github.com/nuxt/nuxt/security/advisories/GHSA-2452-6xj8-jh47 2025-01-25 00:57:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113886275645982803 2025-01-25 01:05:10+00:00| seen|...

CVE-2025-24714

creationtimestamp| type| source ---|---|--- 2025-01-24 22:02:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113885585669296851...

CVE-2025-24698

creationtimestamp| type| source ---|---|--- 2025-01-24 21:32:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113885467515902805...

CVE-2025-24659

creationtimestamp| type| source ---|---|--- 2025-01-24 20:17:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113885172291382655 2025-01-31 01:06:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/12009 2025-01-31 10:00:05+00:00| published-proof-of-concept|...

CVE-2025-24725

creationtimestamp| type| source ---|---|--- 2025-01-24 20:16:10+00:00| seen| https://t.me/cvedetector/16332 2025-01-24 22:47:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113885762803250461...

CVE-2025-24732

creationtimestamp| type| source ---|---|--- 2025-01-24 20:15:59+00:00| seen| https://t.me/cvedetector/16325 2025-01-24 23:17:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113885880873925036...

CVE-2025-24738

creationtimestamp| type| source ---|---|--- 2025-01-24 20:15:50+00:00| seen| https://t.me/cvedetector/16318 2025-01-24 23:17:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113885880916493164...

CVE-2025-24622

creationtimestamp| type| source ---|---|--- 2025-01-24 19:16:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113884936101374029...

GHSA-XCPX-H22F-M42V

creationtimestamp| type| source ---|---|--- 2025-01-24 19:11:01+00:00| seen| https://poliverso.org/objects/0477a01e-c9826325-5c6ea68eb999f067...

CVE-2025-0704 JoeyBling bootplus QrCodeController.java qrCode resource consumption

A vulnerability, which was classified as problematic, was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. Affected is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument w/h leads to resource...