CVE-2024-41780

creationtimestamp| type| source ---|---|--- 2025-01-03 14:41:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113764946096800836 2025-01-03 15:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3letuztmdua2a 2025-01-03 15:52:54+00:00| seen|...

Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser..

Summary When an error message is generated, care should be taken to ensure that it does not contain sensitive information about the environment, users or any other information that may be considered sensitive. Such information may be valuable itself or may be useful for further attacks with a...

CVE-2024-53841

creationtimestamp| type| source ---|---|--- 2025-01-03 04:09:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113762457450490131 2025-01-03 04:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lesq6ih7q225 2025-01-03 04:42:42+00:00| seen|...

PT-2025-3764 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Shop version 1.0 Description: A problem has been found in the code that affects the /view.php file. Manipulating the name/details argument leads to cross site scripting attacks. These attacks can be started from a remote...

SUSE: Security Advisory (SUSE-SU-2025:0006-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that stems from a possible biometric bypass. No details of the vulnerability are provided at this time...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system developed by Google Inc. in the United States. Google Android suffers from a security vulnerability, no details of the vulnerability are provided at this time...

CVE-2025-0175: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument name/details leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android, which stems from an incorrect boundary check in the Exynosparsinguserdataregistereditutt35 function of the VendorVideoAPI.cpp file, which may be subjec...

CVE-2022-45830

creationtimestamp| type| source ---|---|--- 2025-01-02 15:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerele3jke22 2025-01-02 15:56:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lergv4udxs2u 2025-01-02 16:46:15+00:00| seen|...

CVE-2023-23672

CVE-2023-23672 concerns WordPress plugin GiveWP (Liquid Web/StellarWP) up to version 2.25.1, with a Missing Authorization vulnerability in a function affecting content deletion. The issue allows an authenticated user with Contributor privileges to delete arbitrary content due to insufficient auth...

CVE-2024-56137 MaxKB RCE vulnerability in function library

MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation RAG. Prior to version 1.9.0, a remote command execution vulnerability exists in the module of function library. The vulnerabili...

CVE-2024-13111

creationtimestamp| type| source ---|---|--- 2025-01-02 14:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerb7wtrq62e 2025-01-02 15:55:47+00:00| seen| https://t.me/cvedetector/14153...

CVE-2023-48739

CVE-2023-48739 affects the Porto Theme - Functionality WordPress plugin (pre-2.12.1). The issue is a Missing/Broken Access Control vulnerability allowing unauthenticated access due to incorrectly configured authorization. The CVSSv3.1 base score is 5.3 (Medium) with Low availability impact per Pa...

CVE-2023-46606

creationtimestamp| type| source ---|---|--- 2025-01-02 13:53:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113759091954472672...

CVE-2024-56246

creationtimestamp| type| source ---|---|--- 2025-01-02 12:20:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2sw24jr2o 2025-01-02 14:15:18+00:00| seen| https://t.me/cvedetector/14134 2025-01-02 20:08:33+00:00| seen|...

CVE-2024-37503

creationtimestamp| type| source ---|---|--- 2025-01-02 12:19:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2qc7kuq2c 2025-01-02 17:53:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113760036769386594...

CVE-2024-37412

creationtimestamp| type| source ---|---|--- 2025-01-02 12:18:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2ovpjfj2o 2025-01-02 16:38:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113759741511270009...

CVE-2024-56252

CVE-2024-56252 : Stored XSS in Enter Addons (WordPress plugin). Root cause: improper neutralization of input during web page generation. Affected: Enter Addons – from n/a through 2.1.9. Exploitation: stored cross-site scripting via plugin-generated pages. Remediation: upgrade to version 2.1.9 or ...

CVE-2023-47689

CVE-2023-47689 corresponds to a Missing Authorization (Broken Access Control) issue in the WordPress Animator plugin (versions <= 3.0.10) where unauthenticated users can change plugin settings. The vulnerability is documented with CVSS 3.1/6.5 (Medium) and is explicitly mitigated by a fix in v...