9437 matches found
CVE-2024-10960 Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'storeUploads' function in all versions up to, and including, 2.6.4. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
CVE-2025-1190
creationtimestamp| type| source ---|---|--- 2025-02-12 10:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwxwsii72a 2025-02-12 11:07:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4058 2025-02-12 12:41:37+00:00| seen| https://t.me/cvedetector/17836...
CVE-2024-12296
creationtimestamp| type| source ---|---|--- 2025-02-12 09:28:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113990205022762415 2025-02-12 10:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwwpliar2z 2025-02-12 10:48:24+00:00| seen|...
CVE-2024-22467
creationtimestamp| type| source ---|---|--- 2025-02-12 08:10:34+00:00| seen| https://chaos.social/users/christopherkunz/statuses/113989899534194397 2025-02-12 08:24:33+00:00| seen| https://bsky.app/profile/christopherkunz.bsky.social/post/3lhxqpuyrq22y...
CVE-2025-1185
creationtimestamp| type| source ---|---|--- 2025-02-12 07:34:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113989758529052081 2025-02-12 08:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxq7w77lg2s 2025-02-12 09:08:22+00:00|...
CVE-2025-1183
creationtimestamp| type| source ---|---|--- 2025-02-12 07:01:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113989628444380489 2025-02-12 07:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxmudoitn2c 2025-02-12 08:25:02+00:00| seen|...
CVE-2025-0808
creationtimestamp| type| source ---|---|--- 2025-02-12 03:39:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113988831796748506 2025-02-12 04:17:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxcvdcxhb2c 2025-02-12 05:06:43+00:00| seen|...
CVE-2024-21971
Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service...
Q-Free MAXTIME Suite 安全漏洞
Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions that stems from the use of weak authentication in the PIN authentication mechanism. An attacker exploiting this...
CVE-2024-57602
An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file...
GHSA-52RF-25HQ-5M33 GeoNetwork search end-point information disclosure in response headers
Impact The search end-point response headers contain information about Elasticsearch software in use. This information is sensitive from a security point of view because it allows software used by the server to be easily identified. Patches GeoNetwork 4.4.5 / 4.2.10 Workarounds None References -...
CVE-2023-31343
creationtimestamp| type| source ---|---|--- 2025-02-11 22:40:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113987656887022195 2025-02-11 23:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2fxn4t2c 2025-02-12 01:11:15+00:00| seen|...
CVE-2024-21925
Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution...
CVE-2025-25526
creationtimestamp| type| source ---|---|--- 2025-02-11 20:16:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwi2uferw2p 2025-02-11 21:12:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3922 2025-02-12 00:04:19+00:00| seen|...
CVE-2024-37375
creationtimestamp| type| source ---|---|--- 2025-02-11 19:05:13+00:00| seen| https://vulnerability.circl.lu/bundle/85f9fd3a-b2ef-443b-b091-2cad7418236f 2025-02-15 01:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li6k5wjfmn2n 2025-02-15 05:05:29+00:00| seen|...
CVE-2025-25202 Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`
Ash Authentication is an authentication framework for Elixir applications. Applications which have been bootstrapped by the igniter installer present since AshAuthentication v4.1.0 and who have used the magic link strategy or are manually revoking tokens are affected by revoked tokens being allow...
CVE-2025-26494
creationtimestamp| type| source ---|---|--- 2025-02-11 18:20:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbkcysxx2x 2025-02-11 21:33:28+00:00| seen| https://t.me/cvedetector/17737 2025-02-11 22:19:32+00:00| seen|...
CVE-2025-24425
creationtimestamp| type| source ---|---|--- 2025-02-11 18:19:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbjdopov2p 2025-02-25 22:23:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5406...
