GHSA-5RJC-JC28-CWGG

creationtimestamp| type| source ---|---|--- 2025-02-07 21:03:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3830...

CVE-2022-24752

SyliusGridBundle is a package of generic data grids for Symfony applications. Prior to versions 1.10.1 and 1.11-rc2, values added at the end of query sorting were passed directly to the database. The maintainers do not know if this could lead to direct SQL injections but took steps to remediate t...

CVE-2022-24743

Sylius is an open source eCommerce platform. Prior to versions 1.10.11 and 1.11.2, the reset password token was not set to null after the password was changed. The same token could be used several times, which could result in leak of the existing token and unauthorized password change. The issue ...

CVE-2020-15165

Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it's sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHu...

GO-2025-3444 Improper Access Control in wazuh-agent in github.com/wazuh/wazuh

Improper Access Control in wazuh-agent in github.com/wazuh/wazuh...

GHSA-844J-8V3Q-83RF

creationtimestamp| type| source ---|---|--- 2025-01-26 19:07:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3146...

GHSA-4GV5-8WW7-7MF6

creationtimestamp| type| source ---|---|--- 2025-01-26 07:06:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3117...

GHSA-PXFF-CV94-PM48

creationtimestamp| type| source ---|---|--- 2025-01-25 17:06:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3097...

GHSA-27G8-5Q48-XMW6

creationtimestamp| type| source ---|---|--- 2025-01-21 18:00:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2430...

GHSA-PM8J-3V64-92CQ

creationtimestamp| type| source ---|---|--- 2025-01-16 22:56:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2070...

GHSA-XFJ4-9G7W-F4GH

creationtimestamp| type| source ---|---|--- 2025-01-10 17:03:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1165...

GHSA-24M8-VX7P-Q7MF

creationtimestamp| type| source ---|---|--- 2025-01-06 06:40:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/150...

GHSA-9G72-VRH2-4XQW

creationtimestamp| type| source ---|---|--- 2025-01-05 18:40:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/136...

GHSA-5CHH-WV34-P78R

creationtimestamp| type| source ---|---|--- 2025-01-05 01:33:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/64 2025-01-05 01:36:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/86 2025-01-05 01:39:04+00:00| published-proof-of-concept|...

CVE-2024-47600

creationtimestamp| type| source ---|---|--- 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...

CVE-2024-47834

creationtimestamp| type| source ---|---|--- 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...

FreeBSD : py-matrix-synapse -- multiple vulnerabilities in versions prior to 1.120.1 (71f3e9f0-bafc-11ef-885d-901b0e934d69)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 71f3e9f0-bafc-11ef-885d-901b0e934d69 advisory. element-hq/synapse developers report: The 1.120.1 release fixes multiple security...

GO-2024-3295 Violation of GitHub host security boundary when sourcing authentication token within a codespace in github.com/cli/go-gh

Violation of GitHub host security boundary when sourcing authentication token within a codespace in github.com/cli/go-gh...

CVE-2024-47539

creationtimestamp| type| source ---|---|--- 2024-12-11 19:17:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113635795675032476 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...

py-matrix-synapse -- multiple vulnerabilities in versions prior to 1.120.1

element-hq/synapse developers report: The 1.120.1 release fixes multiple security vulnerabilities, some affecting all prior versions of Synapse. Server administrators are encouraged to update Synapse as soon as possible. We are not aware of these vulnerabilities being exploited in the wild...