CVE-2024-13854

The Education Addon for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.1 via the naeduelementortemplate shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wit...

CVE-2024-13657 Store Locator Widget <= 2025r1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Store Locator Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'storelocatorwidget' shortcode in all versions up to, and including, 2025r1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2025-1447

creationtimestamp| type| source ---|---|--- 2025-02-19 03:09:26+00:00| seen| Telegram/eVW0SDeapKbyz3DaIi28cB3jh41KTy7RDpdKBCqZ8gmHSfgB 2025-02-19 03:41:39+00:00| seen| https://t.me/cvedetector/18397 2025-02-19 04:01:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liivcbgabk2m...

CVE-2024-57262

creationtimestamp| type| source ---|---|--- 2025-02-19 02:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liipelzwma23 2025-02-19 05:21:59+00:00| seen| https://t.me/cvedetector/18400 2025-02-19 06:01:49+00:00| seen|...

CVE-2025-1447 kasuganosoras Pigeon index.php server-side request forgery

A vulnerability was found in kasuganosoras Pigeon 1.0.177. It has been declared as critical. This vulnerability affects unknown code of the file /pigeon/imgproxy/index.php. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. Upgrading t...

CVE-2025-25947

Bento4 version v1.6.0-641 is vulnerable to a segmentation fault caused by an improper initialization issue in the Ap4Atom.cpp component. Specifically, the flaw exists in AP4_AtomParent::RemoveChild when executing mp4encrypt with a specially crafted MP4 input file. This vulnerability can lead to a...

CVE-2025-25474

DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h...

CVE-2025-25469

creationtimestamp| type| source ---|---|--- 2025-02-18 22:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxodhz423 2025-02-20 01:27:45+00:00| seen| Telegram/fLCF0hsKd5w5udLM45RH3dVf2OoO74QdCzK602W7HVsGWnMB 2025-08-28 13:38:59+00:00| seen|...

CVE-2025-25467

creationtimestamp| type| source ---|---|--- 2025-02-18 22:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liibxj7wx323 2025-02-19 16:21:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lik6nbpjww2a 2025-02-19 17:49:01+00:00| seen|...

CVE-2025-22663

creationtimestamp| type| source ---|---|--- 2025-02-18 20:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lii3cn6adv2t 2025-02-18 22:48:31+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114027325751348576 2025-02-18 23:30:37+00:00| seen|...

CVE-2025-22645

creationtimestamp| type| source ---|---|--- 2025-02-18 20:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lii3c75qxi2o...

CVE-2024-45775 Grub2: commands/extcmd: missing check for failed allocation

A flaw was found in grub2 where the grubextcmddispatcher function calls grubarglistalloc to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parseoption function, leading...

CVE-2025-26603

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

CVE-2024-45780

A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation against possible integer overflows. It's possible to cause the allocation length to overflow with a crafted tar file, leading to a heap...

CVE-2024-4028

CVE-2024-4028 affects Keycloak. The issue allows a privileged attacker to supply a malicious payload as a permission during admin-console item (Resource/Permissions) creation, resulting in stored XSS. Description and related entries consistently describe this XSS path; exploitation details are no...

CVE-2025-25305

creationtimestamp| type| source ---|---|--- 2025-02-18 15:20:00+00:00| published-proof-of-concept| https://github.com/home-assistant/core/security/advisories/GHSA-m3pm-rpgg-5wj6 2025-02-18 19:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihxx2p4ei2k 2025-02-18...

CVE-2024-13689

The Uncode Core plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.9.1.6. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

CVE-2025-0864

creationtimestamp| type| source ---|---|--- 2025-02-18 08:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligt2bcuji2y 2025-02-18 08:41:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4763 2025-02-18 10:57:38+00:00| seen| https://t.me/cvedetector/18303...

CVE-2025-0422

creationtimestamp| type| source ---|---|--- 2025-02-18 08:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligszy6rzv23 2025-02-18 08:41:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4761 2025-02-18 10:00:46+00:00| seen|...