CVE-2024-13253

creationtimestamp| type| source ---|---|--- 2025-01-09 19:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbwqneb22 2025-01-09 19:17:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1026 2025-01-09 19:38:48+00:00| seen|...

CVE-2025-22808

creationtimestamp| type| source ---|---|--- 2025-01-09 16:18:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd3dakbbr2k 2025-01-09 17:46:13+00:00| seen| https://t.me/cvedetector/14869...

CVE-2025-22804

creationtimestamp| type| source ---|---|--- 2025-01-09 16:17:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd3cwm4ct22 2025-01-10 21:04:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1243...

CVE-2025-22361

creationtimestamp| type| source ---|---|--- 2025-01-09 16:17:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd3bh4uh22m...

CVE-2025-22505 WordPress NC Wishlist for Woocommerce Plugin <= 1.0.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crispweb NC Wishlist for Woocommerce nc-wishlist-for-woocommerce allows SQL Injection.This issue affects NC Wishlist for Woocommerce: from n/a through = 1.0.1...

CVE-2025-22595

CVE-2025-22595 is a Reflected XSS in Mailing Group Listserv (WordPress plugin) affecting versions from n/a up to 2.0.9. The description and linked Red Hat/ENISA entries confirm a cross-site scripting vulnerability with CVSS v3.1 base score 7.1 (HIGH). No remediation or fix version is specified in...

CVE-2025-22820 WordPress VR Views plugin <= 1.5.1 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Walmsley VR Views allows Stored XSS.This issue affects VR Views: from n/a through 1.5.1...

CVE-2024-12819

creationtimestamp| type| source ---|---|--- 2025-01-09 11:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcki22czx2l 2025-01-09 12:15:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/935 2025-01-09 12:44:43+00:00| seen| https://t.me/cvedetector/14832...

CVE-2024-12394

creationtimestamp| type| source ---|---|--- 2025-01-09 11:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckh75z7c22 2025-01-09 11:59:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113798282266042322 2025-01-09 12:15:20+00:00| seen|...

CVE-2025-0348

creationtimestamp| type| source ---|---|--- 2025-01-09 10:01:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113797818880146120 2025-01-09 10:13:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/925 2025-01-09 10:15:47+00:00| seen|...

CVE-2024-43661

creationtimestamp| type| source ---|---|--- 2025-01-09 08:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcagxwjoi25 2025-01-09 08:47:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113797527995004670 2025-01-09 10:13:50+00:00| seen|...

CVE-2024-43650

creationtimestamp| type| source ---|---|--- 2025-01-09 08:02:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113797350844757560 2025-01-09 08:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcafxpgze2d 2025-01-09 10:14:01+00:00| seen|...

CVE-2025-0339

A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the file /vehical-details.php of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotel...

CVE-2025-0339

creationtimestamp| type| source ---|---|--- 2025-01-09 07:14:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/901 2025-01-09 07:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfc52e66wo2l 2025-01-09 09:23:23+00:00| seen|...

CVE-2025-0340

creationtimestamp| type| source ---|---|--- 2025-01-09 07:14:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/900 2025-01-09 07:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfc52gvorg25 2025-01-09 08:30:24+00:00| seen|...

CVE-2024-13041 Incorrect User Management in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. A...

CVE-2024-9525

creationtimestamp| type| source ---|---|--- 2025-01-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-025/...

CVE-2024-13204

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blogid leads to sql injection. The attack can be launched remotely. The...

CVE-2024-45344

creationtimestamp| type| source ---|---|--- 2025-01-08 20:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfay5qyswr2m 2025-01-08 21:41:07+00:00| seen| https://t.me/cvedetector/14735...

Selenium geckodriver RCE

Selenium Server Grid use exploit/linux/http/seleniumgreedfirefoxrcecve202228108 msf exploitseleniumgreedfirefoxrcecve202228108 show targets ...targets... msf exploitseleniumgreedfirefoxrcecve202228108 set TARGET msf exploitseleniumgreedfirefoxrcecve202228108 show options ...show and set options...