1608 matches found
GHSA-63XR-98VC-WHX5
creationtimestamp| type| source ---|---|--- 2025-06-25 15:52:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19468...
GHSA-9VJ4-RV7Q-36QJ
creationtimestamp| type| source ---|---|--- 2025-06-24 03:34:31+00:00| seen| Telegram/61p3TvgIcQeITUHd25WC7uXKnalG822tf2zquntb02gfO4o 2025-06-24 03:48:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19301...
GHSA-R976-RFRV-Q24M
creationtimestamp| type| source ---|---|--- 2025-06-21 03:25:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19098...
GHSA-QR9F-MPGF-WP25
creationtimestamp| type| source ---|---|--- 2025-06-19 14:40:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18863...
GHSA-JP4X-W9CJ-97Q7
creationtimestamp| type| source ---|---|--- 2025-06-13 19:03:31+00:00| seen| Telegram/4Ga2KnPxVC8teo9C6hWW8v7cz1iZaC5NGvXAx1RBKflQoQ...
CVE-2024-38524
creationtimestamp| type| source ---|---|--- 2025-06-10 14:14:08+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jm79-7xhw-6f6f...
CVE-2025-49007
Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of service vulnerability in the Content-Disposition parsing component of Rack. This is very similar to the previous security issue CVE-2022-44571. Carefully crafted input can caus...
GHSA-6C48-67XX-VQGC
creationtimestamp| type| source ---|---|--- 2025-05-22 21:38:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17361...
CVE-2021-37700
@github/paste-markdown is an npm package for pasting markdown objects. A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown before version 0.3.4. If the clipboard data contains the string , a div is dynamically created, and the clipboard content is copied into its...
CVE-2021-21399
Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass the auth checks. For more details and...
GHSA-RVHC-RCH9-J943
creationtimestamp| type| source ---|---|--- 2025-05-21 14:43:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17120...
CVE-2025-47775
creationtimestamp| type| source ---|---|--- 2025-05-14 15:08:16+00:00| published-proof-of-concept| https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3...
CVE-2025-47280
Umbrao Forms HTML injection : The Send email workflow in Umbraco Forms (versions 7.x through just before 13.4.2 and 15.1.2) does not HTML-encode user-provided field values, allowing potential email spoofing or bypass of security checks. Affected forms can patch by updating to 13.4.2 or 15.1.2, or...
Malicious code in ascpc-npm-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dfc46bf902782d78e5120173d965b16776b6f7d52ac27e8b6a05eb734290dce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-892P-PQRR-HXQR
creationtimestamp| type| source ---|---|--- 2025-05-02 17:16:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14526...
GHSA-7MPF-6GG2-2FJP
creationtimestamp| type| source ---|---|--- 2025-04-30 18:14:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14112...
GHSA-CV2P-32V3-VHWQ
creationtimestamp| type| source ---|---|--- 2025-04-23 17:04:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13077...
CVE-2025-46567
creationtimestamp| type| source ---|---|--- 2025-04-23 08:41:15+00:00| published-proof-of-concept| https://github.com/hiyouga/LlamaFactory/security/advisories/GHSA-f2f7-gj54-6vpv...