CVE-2025-24575

creationtimestamp| type| source ---|---|--- 2025-01-24 18:16:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113884699888955141...

CVE-2025-24721

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aleksandar Urošević Easy YouTube Gallery easy-youtube-gallery allows Stored XSS.This issue affects Easy YouTube Gallery: from n/a through = 1.0.4...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in express-4.19.2.tgz

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of express-4.19.2.tgz Vulnerability Details CVEID:CVE-2024-43796 DESCRIPTION: expressjs express is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker coul...

CVE-2025-24595 WordPress All Embed – Elementor Addons plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins All Embed – Elementor Addons all-embed-addons-for-elementor allows Stored XSS.This issue affects All Embed – Elementor Addons: from n/a through = 1.1.3...

CVE-2025-24543 WordPress Ultimate Coming Soon & Maintenance plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through = 1.0.9...

CVE-2025-22612

creationtimestamp| type| source ---|---|--- 2025-01-24 17:05:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2947 2025-01-24 17:48:31+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113884588338312096 2025-01-24 19:25:40+00:00| seen|...

CVE-2025-24359 ASTEVAL Vulnerable to Maliciously Crafted Format Strings Leading to Sandbox Escape

ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the asteval library, they can bypass asteval's restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is...

CVE-2025-23837

creationtimestamp| type| source ---|---|--- 2025-01-24 11:25:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113883082998286517 2025-01-24 12:43:46+00:00| seen| https://t.me/cvedetector/16257...

CVE-2025-23838 WordPress Bauernregeln Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rally Vincent Bauernregeln bauernregeln allows Reflected XSS.This issue affects Bauernregeln: from n/a through = 1.0.1...

IBM InfoSphere Information Server security vulnerabilities

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server version 11.7. An attacker...

Coolify security vulnerability

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. coolLabs Coolify suffers from an information disclosure vulnerability that stems from the fact that any authenticated user only needs to know the UUID of the model, which can be exploited by an attacker to obtain the...

Linksys E8450 id_email_check_btn Command Injection Vulnerability

The Linksys E8450 is a router from Linksys USA. A command injection vulnerability exists in the Linksys E8450 v1.2.00.360516, which stems from idemailcheckbtn failing to correctly filter constructed command special characters, commands, and more. An attacker can exploit this vulnerability to caus...

CVE-2024-54507

creationtimestamp| type| source ---|---|--- 2025-01-23 22:42:05+00:00| seen| https://bsky.app/profile/hn100.bsky.social/post/3lggxcviw4y2c 2025-01-23 22:45:51+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3lggxjneluj25 2025-01-23 22:51:40+00:00| seen|...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in cookie

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of cookie Vulnerability Details CVEID:CVE-2024-47764 DESCRIPTION: jshttp cookie could allow a remote attacker to bypass security restrictions, caused by improper input validation by the cookie name, path, and...

CVE-2024-52330

creationtimestamp| type| source ---|---|--- 2025-01-23 17:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf3jcdp32e 2025-01-23 17:40:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggggvsowy2b 2025-01-23 19:09:10+00:00| seen|...

CVE-2025-23723

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbrqum772f 2025-01-23 16:55:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggdwfam5i2h 2025-01-23 18:18:48+00:00| seen|...

CVE-2025-23541

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbqyoyqf2x...

CVE-2025-23634

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codehandling Youtube Video Grid youmax-channel-embeds-for-youtube-businesses allows Reflected XSS.This issue affects Youtube Video Grid: from n/a through = 1.9...

CVE-2024-10539

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Uyumsoft Informatin Systems Uyumsoft ERP allows XSS Using Invalid Characters, Reflected XSS. This issue affects Uyumsoft ERP: before Erp4.2109.166p45...

USN-7205-2: Django vulnerability

USN-7205-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: It was discovered that Django incorrectly handled certain IPv6 strings. An attacker could possibly use this issue to cause a denial of service...