CVE-2025-58624

CVE-2025-58624 describes a Stored XSS in the WordPress Exchange Rates plugin (versions up to 1.2.5). The vulnerability stems from improper input neutralization during web page generation, enabling attacker-controlled input to be stored and reflected in pages. Severity is MEDIUM (CVSS 3.1 base sco...

CVE-2025-58624 WordPress Exchange Rates Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in falselight Exchange Rates exchange-rates allows Stored XSS.This issue affects Exchange Rates: from n/a through = 1.2.5...

CVE-2025-58624 WordPress Exchange Rates Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in falselight Exchange Rates exchange-rates allows Stored XSS.This issue affects Exchange Rates: from n/a through = 1.2.5...

PT-2025-35757

Name of the Vulnerable Software and Affected Versions: falselight Exchange Rates versions n/a through 1.2.5 Description: falselight Exchange Rates is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. The vulnerability allows for...

WordPress plugin Exchange Rates 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-58126

Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic...

CVE-2025-58124

Improper Certificate Validation in Checkmk Exchange plugin check-mk-api allows attackers in MitM position to intercept traffic...

CVE-2025-58125

Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic...

CVE-2025-58127

Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercept traffic...

Linux Distros Unpatched Vulnerability : CVE-2024-38528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. Thi...

Linux Distros Unpatched Vulnerability : CVE-2017-13099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover th...

Linux Distros Unpatched Vulnerability : CVE-2021-21900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A code execution vulnerability exists in the dxfRW::processLType functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can le...

GHSA-4342-X723-CH2F

creationtimestamp| type| source ---|---|--- 2025-08-29 21:58:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115114292491949376 2025-12-02 03:16:32+00:00| seen| https://gist.github.com/deepak-chowdry/3da737fb0b4c63ed1bfe586c677e4860...

CVE-2025-9603

creationtimestamp| type| source ---|---|--- 2025-08-29 13:08:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115112208600347245...

CVE-2025-39245

creationtimestamp| type| source ---|---|--- 2025-08-29 13:07:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115112203238902781 2025-09-04 21:41:55+00:00| seen| https://bsky.app/profile/undercodenews.bsky.social/post/3ly24fjkgpn2m...

CVE-2025-9584

creationtimestamp| type| source ---|---|--- 2025-08-28 20:18:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108236769126304...

CVE-2025-6203

creationtimestamp| type| source ---|---|--- 2025-08-28 20:03:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108179538985792 2025-09-02 06:30:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lxtijqktdl25 2025-09-02 16:09:59+00:00| seen|...

CVE-2025-9576

creationtimestamp| type| source ---|---|--- 2025-08-28 18:24:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107787041182636...

CVE-2025-57767

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn't in a previous 401 response's WWW-Authenticate header, or an Authorization header wi...

CVE-2025-54995

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions...