9704 matches found
CVE-2025-20051
Mattermost versions 10.4.x = 10.4.1, 9.11.x = 9.11.7, 10.3.x = 10.3.2, 10.2.x = 10.2.2 fail to properly validate input when patching and duplicating a board, which allows a user to read any arbitrary file on the system via duplicating a specially crafted block in Boards...
CVE-2025-1618
creationtimestamp| type| source ---|---|--- 2025-02-24 05:21:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5127 2025-02-24 08:09:18+00:00| seen| https://t.me/cvedetector/18784 2025-02-24 08:37:37+00:00| seen|...
[SECURITY] [DLA 4066-1] fort-validator security update
Debian LTS Advisory DLA-4066-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert February 24, 2025 https://wiki.debian.org/LTS Package : fort-validator Version : 1.5.3-1deb11u2 CVE ID : CVE-2024-45234 CVE-2024-45235 CVE-2024-45236 CVE-2024-45237 CVE-2024-45238...
CVE-2025-1589
creationtimestamp| type| source ---|---|--- 2025-02-23 18:21:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5098 2025-02-23 20:27:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liuob4bd5b23 2025-02-23 21:53:34+00:00| seen| https://t.me/cvedetector/18754...
CVE-2025-1580
creationtimestamp| type| source ---|---|--- 2025-02-23 10:21:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5088 2025-02-23 13:32:29+00:00| seen| https://t.me/cvedetector/18743 2025-02-23 14:17:16+00:00| seen|...
CVE-2025-1578 PHPGurukul/Campcodes Online Shopping Portal search-result.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul/Campcodes Online Shopping Portal 2.1. This affects an unknown part of the file /search-result.php. The manipulation of the argument Product leads to sql injection. It is possible to initiate the attack remotely. The exploi...
CVE-2024-13728
creationtimestamp| type| source ---|---|--- 2025-02-23 06:22:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5083 2025-02-23 09:22:05+00:00| seen| https://t.me/cvedetector/18739 2025-02-23 10:17:00+00:00| seen|...
CVE-2025-26776
creationtimestamp| type| source ---|---|--- 2025-02-22 16:25:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5032 2025-02-22 17:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114048796379381479 2025-02-22 19:10:09+00:00| seen|...
CVE-2025-26776
CVE-2025-26776 affects WordPress Chaty Pro plugin versions n/a through 3.3.3. The root cause is an Unrestricted Upload of File with Dangerous Type, enabling an attacker to upload a Web Shell to the web server. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) indicates a remote, unauthent...
CVE-2024-37361
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid. CWE-502 Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, deserialize untrusted JSON data without constraining the parser to...
CVE-2024-45674 IBM Security Verify Bridge information disclosure
IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores potentially sensitive information in log files that could be read by a local user...
CVE-2025-25769
creationtimestamp| type| source ---|---|--- 2025-02-21 22:17:18+00:00| seen| https://t.me/cvedetector/18688 2025-02-24 18:26:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5201 2025-02-24 19:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n4v65s23 2025-02-24...
CVE-2025-26622 sqrt doesn't define rounding behavior in Vyper
vyper is a Pythonic Smart Contract Language for the EVM. Vyper sqrt builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. This issue is being addressed a...
CVE-2025-1403
creationtimestamp| type| source ---|---|--- 2025-02-21 17:18:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4917 2025-02-21 18:30:59+00:00| published-proof-of-concept| Telegram/jfTnJZZ5uFqsUFFPSgzOmVcBPm9fNtArLaitrRuQl86f-A 2025-02-21 19:07:13+00:00| seen|...
MAL-2025-1511 Malicious code in spacelift-webhook-receiver (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6bb9dc87c1669be92bee0be50a372fb87d1d92064bc4db257131d4323c2783e9 The OpenSSF Package Analysis project identified 'spacelift-webhook-receiver' @ 1.1.0 npm as malicious. It is considered malicious because: - The...
CVE-2024-9150
creationtimestamp| type| source ---|---|--- 2025-02-21 12:18:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4883 2025-02-21 15:26:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jh67j52r 2025-02-21 15:35:56+00:00| seen|...
CVE-2025-1489
creationtimestamp| type| source ---|---|--- 2025-02-21 11:18:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4879 2025-02-21 15:26:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhjfi32s 2025-02-21 15:35:58+00:00| seen| https://t.me/cvedetector/18654 2025-08-25...
CVE-2024-13713
creationtimestamp| type| source ---|---|--- 2025-02-21 11:18:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4878 2025-02-21 15:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhmsok26 2025-02-21 15:35:51+00:00| seen| https://t.me/cvedetector/18649...
CVE-2024-13846
Public details on CVE-2024-13846 are limited in the provided documents. No connected sources with concrete technical specifics (affected versions, root cause, exploit details, or fixes) are present. Monitor for updates as new info becomes available.
CVE-2025-23115
creationtimestamp| type| source ---|---|--- 2025-02-21 06:03:43+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lio52ao6nk2s 2025-02-21 06:03:50+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lio52kijak2k 2025-02-21 06:11:23+00:00| seen|...