CVE-2024-57798

creationtimestamp| type| source ---|---|--- 2025-01-11 13:05:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1299 2025-01-11 13:17:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6gnk4h2d 2025-01-11 14:55:18+00:00| seen|...

BIT-MATTERMOST-2024-23493

Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a team that they are not a member of...

CVE-2025-23108

Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability was fixed in Firefox for iOS 134...

CVE-2024-12505

creationtimestamp| type| source ---|---|--- 2025-01-11 02:58:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113807478184539528 2025-01-11 03:04:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1261 2025-01-11 03:15:59+00:00| seen|...

RLSA-2025:0065 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: i40e: fix race condition by adding filter's intermediate sync state CVE-2024-53088 kernel: mptcp: cope racing subflow creation in mptcprcvspaceadjust CVE-2024-53122 For more details about...

Security Bulletin: The Log Source Management App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Log Source Management App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2024-43796 DESCRIPTION: expressjs...

CVE-2024-57222

creationtimestamp| type| source ---|---|--- 2025-01-10 17:32:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113805250968600872 2025-01-10 18:03:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1201 2025-01-10 18:15:44+00:00| seen|...

CVE-2020-15522

creationtimestamp| type| source ---|---|--- 2025-01-10 16:25:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113804987998612228 2025-01-10 16:25:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113804988046864538 2025-01-13 21:12:40+00:00| published-proof-of-concept|...

CVE-2025-22598

creationtimestamp| type| source ---|---|--- 2025-01-10 15:32:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113804779630653898 2025-01-10 15:35:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113804792818857490 2025-01-10 16:16:17+00:00| seen|...

CVE-2015-0279

creationtimestamp| type| source ---|---|--- 2025-01-10 12:54:01+00:00| seen| https://bsky.app/profile/devtty.de/post/3lffafeu4rx26 2026-11-04 13:00:09+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/45b08516-21cd-4a31-a665-db852c2639c5...

Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerabilties in crypto-js version 3.1.2

Summary A vulnerability has been identified in Crypto-Js 3.1.2, which is used in IBM Engineering Lifecycle Management - IBM Jazz. This bulletin contains information regarding vulnerabilities and remediation actions. Vulnerability Details CVEID:CVE-2023-46233 DESCRIPTION: Brix crypto-js could allo...

SUSE: Security Advisory (SUSE-SU-2025:0054-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Online Shoe Store details.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the id parameter in the /details.php page that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal S...

CVE-2024-13289

creationtimestamp| type| source ---|---|--- 2025-01-09 21:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlxqdnez2e 2025-01-10 17:05:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1184...

CVE-2024-13311

creationtimestamp| type| source ---|---|--- 2025-01-09 20:49:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113800364263646320 2025-01-09 21:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlzcqtmp2m 2025-01-09 21:17:25+00:00| seen|...

CVE-2024-46505

creationtimestamp| type| source ---|---|--- 2025-01-09 20:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdioyizxt22 2025-01-09 20:17:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1060 2025-01-09 21:57:26+00:00| seen|...

CVE-2024-54762

creationtimestamp| type| source ---|---|--- 2025-01-09 20:03:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113800185007506577 2025-01-09 20:17:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdipahtor2k 2025-01-09 21:57:19+00:00| seen|...

CVE-2021-20288

creationtimestamp| type| source ---|---|--- 2025-01-09 19:46:10+00:00| seen| https://gist.github.com/sini/daf2ebc7f4ff5092da076dd4d696eee5...

CVE-2024-13277 Smart IP Ban - Critical - Access bypass - SA-CONTRIB-2024-041

Incorrect Authorization vulnerability in Drupal Smart IP Ban allows Forceful Browsing.This issue affects Smart IP Ban: from 7.X-1.0 before 7.X-1.1...

CVE-2024-13273 Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Open Social allows Cross-Site Scripting XSS.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11...