CVE-2024-47619

creationtimestamp| type| source ---|---|--- 2025-05-07 15:22:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15314 2025-05-07 15:50:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114467343284596625 2025-05-07 18:26:58+00:00| seen|...

GHSA-XR54-GX74-FGHG

creationtimestamp| type| source ---|---|--- 2025-05-07 15:22:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15314 2025-05-07 15:50:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114467343284596625...

CVE-2025-47620

Cross-Site Request Forgery CSRF vulnerability in bundgaard Martins Free Monetized Ad Exchange Network martins-free-and-easy-ad-network-get-more-visitors allows Reflected XSS.This issue affects Martins Free Monetized Ad Exchange Network: from n/a through = 1.0.6...

CVE-2025-47620 WordPress Martins Free Monetized Ad Exchange Network plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in bundgaard Martins Free Monetized Ad Exchange Network martins-free-and-easy-ad-network-get-more-visitors allows Reflected XSS.This issue affects Martins Free Monetized Ad Exchange Network: from n/a through = 1.0.6...

CVE-2025-47620

CVE-2025-47620: WordPress Martins Free Monetized Ad Exchange Network plugin, versions

CVE-2025-47620 WordPress Martins Free Monetized Ad Exchange Network plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in bundgaard Martins Free Monetized Ad Exchange Network martins-free-and-easy-ad-network-get-more-visitors allows Reflected XSS.This issue affects Martins Free Monetized Ad Exchange Network: from n/a through = 1.0.6...

Cisco IOS XE 安全漏洞

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE that stems from insufficient validatio...

WordPress plugin Martins Free Monetized Ad Exchange Network 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

Configure Proper SSH Key Exchange Algorithms

Key exchange is a process in which two parties exchange keys to allow the use of an encryption algorithm. A secure key exchange algorithm enables them to securely exchange keys, thereby using encryption algorithms to encrypt messages to be sent and decrypt received messages. Set the SSH key...

CVE-2025-2898

creationtimestamp| type| source ---|---|--- 2025-05-06 17:46:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114462136252821396 2025-05-06 18:39:52+00:00| seen| https://t.me/cvedetector/24615 2025-05-07 04:21:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15253...

CVE-2025-30165

creationtimestamp| type| source ---|---|--- 2025-05-06 17:13:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114462007419812570 2025-05-06 18:21:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15182 2025-05-06 18:21:52+00:00| seen|...

CVE-2025-4348

creationtimestamp| type| source ---|---|--- 2025-05-05 17:11:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114456336307073752 2025-05-06 11:21:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15085 2025-05-06 14:21:38+00:00| seen|...

CVE-2025-4316

creationtimestamp| type| source ---|---|--- 2025-05-05 14:20:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14868 2025-05-05 14:30:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114455703183156737 2025-05-05 16:16:30+00:00| seen|...

CVE-2025-4299

creationtimestamp| type| source ---|---|--- 2025-05-05 12:28:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114455221831786910 2025-05-06 00:19:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15014 2025-05-06 00:36:52+00:00| seen|...

An Efficient Hybrid Key Exchange Mechanism

Whitepaper called An Efficient Hybrid Key Exchange Mechanism...

U.S. Charges Yemeni Hacker Behind Black Kingdom Ransomware Targeting 1,500 Systems

The U.S. Department of Justice DoJ on Thursday announced charges against a 36-year-old Yemeni national for allegedly deploying the Black Kingdom ransomware against global targets, including businesses, schools, and hospitals in the United States. Rami Khaled Ahmed of Sana'a, Yemen, has been charg...

GHSA-8X27-JWJR-8545

creationtimestamp| type| source ---|---|--- 2025-05-01 17:57:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114433867704399481 2025-05-01 20:00:50+00:00| published-proof-of-concept| Telegram/QFVP5TcYkEi5fC3DYhpbJ3tJ8sPusYmL1ImuYd1RRjGW6cE 2025-05-02 18:19:42+00:00|...

CVE-2025-4144

PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp . However, it was found that an attacker could cause the check to be skipped. Fixed in: https://github.com/cloudflare/workers-oauth-provider/pull/27...

Amazon Linux 2 : docker (ALASECS-2025-054)

The version of docker installed on the remote host is prior to 25.0.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2025-054 advisory. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CVE-2025-30390

creationtimestamp| type| source ---|---|--- 2025-04-30 17:21:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114428064949898924 2025-04-30 19:48:34+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114428642039876617 2025-04-30 20:30:47+00:00| seen|...