CVE-2025-1580

creationtimestamp| type| source ---|---|--- 2025-02-23 10:21:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5088 2025-02-23 13:32:29+00:00| seen| https://t.me/cvedetector/18743 2025-02-23 14:17:16+00:00| seen|...

CVE-2025-1578 PHPGurukul/Campcodes Online Shopping Portal search-result.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul/Campcodes Online Shopping Portal 2.1. This affects an unknown part of the file /search-result.php. The manipulation of the argument Product leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-13728

creationtimestamp| type| source ---|---|--- 2025-02-23 06:22:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5083 2025-02-23 09:22:05+00:00| seen| https://t.me/cvedetector/18739 2025-02-23 10:17:00+00:00| seen|...

CVE-2025-26776

creationtimestamp| type| source ---|---|--- 2025-02-22 16:25:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5032 2025-02-22 17:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114048796379381479 2025-02-22 19:10:09+00:00| seen|...

CVE-2025-26776

CVE-2025-26776 affects WordPress Chaty Pro plugin versions n/a through 3.3.3. The root cause is an Unrestricted Upload of File with Dangerous Type, enabling an attacker to upload a Web Shell to the web server. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) indicates a remote, unauthent...

CVE-2024-37361

The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid. CWE-502 Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, deserialize untrusted JSON data without constraining the parser to...

CVE-2024-45674 IBM Security Verify Bridge information disclosure

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores potentially sensitive information in log files that could be read by a local user...

CVE-2025-25769

creationtimestamp| type| source ---|---|--- 2025-02-21 22:17:18+00:00| seen| https://t.me/cvedetector/18688 2025-02-24 18:26:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5201 2025-02-24 19:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n4v65s23 2025-02-24...

CVE-2025-26622 sqrt doesn't define rounding behavior in Vyper

vyper is a Pythonic Smart Contract Language for the EVM. Vyper sqrt builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. This issue is being addressed a...

CVE-2025-1403

creationtimestamp| type| source ---|---|--- 2025-02-21 17:18:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4917 2025-02-21 18:30:59+00:00| published-proof-of-concept| Telegram/jfTnJZZ5uFqsUFFPSgzOmVcBPm9fNtArLaitrRuQl86f-A 2025-02-21 19:07:13+00:00| seen|...

MAL-2025-1511 Malicious code in spacelift-webhook-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6bb9dc87c1669be92bee0be50a372fb87d1d92064bc4db257131d4323c2783e9 The OpenSSF Package Analysis project identified 'spacelift-webhook-receiver' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

CVE-2024-9150

creationtimestamp| type| source ---|---|--- 2025-02-21 12:18:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4883 2025-02-21 15:26:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jh67j52r 2025-02-21 15:35:56+00:00| seen|...

CVE-2025-1489

creationtimestamp| type| source ---|---|--- 2025-02-21 11:18:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4879 2025-02-21 15:26:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhjfi32s 2025-02-21 15:35:58+00:00| seen| https://t.me/cvedetector/18654 2025-08-25...

CVE-2024-13713

creationtimestamp| type| source ---|---|--- 2025-02-21 11:18:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4878 2025-02-21 15:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhmsok26 2025-02-21 15:35:51+00:00| seen| https://t.me/cvedetector/18649...

CVE-2024-13846

Public details on CVE-2024-13846 are limited in the provided documents. No connected sources with concrete technical specifics (affected versions, root cause, exploit details, or fixes) are present. Monitor for updates as new info becomes available.

CVE-2025-23115

creationtimestamp| type| source ---|---|--- 2025-02-21 06:03:43+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lio52ao6nk2s 2025-02-21 06:03:50+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lio52kijak2k 2025-02-21 06:11:23+00:00| seen|...

[SECURITY] [DSA 5869-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5869-1 [email protected] https://www.debian.org/security/ Andres Salomon February 21, 2025 https://www.debian.org/security/faq -...

CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

CVE-2025-25667

creationtimestamp| type| source ---|---|--- 2025-02-20 23:16:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4826 2025-02-21 00:55:14+00:00| seen| https://t.me/cvedetector/18610 2025-02-21 19:48:42+00:00| seen|...