CVE-2025-1108 Insufficient data authenticity vulnerability in Janto

Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To exploit the vulnerability, the attacker must create a POST request by injecting malicious content into...

CVE-2025-25148

creationtimestamp| type| source ---|---|--- 2025-02-07 10:17:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepr2dfp2q 2025-02-07 12:08:38+00:00| seen| https://t.me/cvedetector/17479 2025-02-07 12:53:59+00:00| seen|...

CVE-2025-25071

creationtimestamp| type| source ---|---|--- 2025-02-07 10:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlelue4vn2x 2025-02-07 10:15:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113962079963358647...

CVE-2025-25080

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gubbigubbi Kona Gallery Block kona-instagram-feed-for-gutenberg allows Stored XSS.This issue affects Kona Gallery Block: from n/a through = 1.7...

CVE-2025-0302

creationtimestamp| type| source ---|---|--- 2025-02-07 09:26:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113961887520571027 2025-02-07 10:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlelnsmti27...

CVE-2025-22402

creationtimestamp| type| source ---|---|--- 2025-02-07 02:28:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113960243769713082 2025-02-07 03:18:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhkncpbijh2u 2025-02-07 06:17:15+00:00| seen|...

CVE-2025-1083

creationtimestamp| type| source ---|---|--- 2025-02-06 23:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk7pouuxw2u 2025-02-07 02:06:41+00:00| seen| https://t.me/cvedetector/17455 2025-02-07 04:19:27+00:00| seen|...

CVE-2025-21279

CVE-2025-21279 is a Microsoft Edge (Chromium-based) Remote Code Execution vulnerability. Edge is the affected product; CVE-2025-21279 is documented across multiple sources (NVD entry and Microsoft Edge advisories) as a high-severity, network-exposed issue with potential for arbitrary code executi...

CVE-2024-56889

creationtimestamp| type| source ---|---|--- 2025-02-06 21:35:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113959092603822996 2025-02-06 22:16:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gn43ws2u 2025-02-07 00:26:02+00:00| seen|...

CVE-2024-25883

creationtimestamp| type| source ---|---|--- 2025-02-06 21:35:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113959092587366089 2025-02-06 22:16:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gafyyd2a 2025-02-06 22:49:16+00:00| seen|...

CVE-2024-56467

creationtimestamp| type| source ---|---|--- 2025-02-06 20:32:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113958841808577146 2025-02-06 21:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjyz7demr24 2025-02-06 22:49:15+00:00| seen|...

CVE-2024-13416

CVE-2024-13416 affects the 2N OS platform. The issue arises when an authorized user uses the API to enable logging, which can disclose valid authentication tokens in the system log due to unfiltered token exposure. Impact is rated medium (CVSS 3.1: 4.3) with network access and low attack complexi...

CVE-2020-15069

creationtimestamp| type| source ---|---|--- 2025-02-06 17:21:53+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113958093669259699 2025-02-06 17:49:28+00:00| seen| https://bsky.app/profile/aakl.bsky.social/post/3lhjnigysgc2b 2025-02-06 17:49:29+00:00| seen|...

CVE-2025-22866

creationtimestamp| type| source ---|---|--- 2025-02-06 16:56:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113957993164493622 2025-02-06 17:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlnmekyk27 2025-02-06 18:48:58+00:00| seen|...

CVE-2024-57962

creationtimestamp| type| source ---|---|--- 2025-02-06 13:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6boodxo2w 2025-02-06 16:03:57+00:00| seen| https://t.me/cvedetector/17389 2025-02-06 16:43:48+00:00| seen|...

CVE-2024-57961

creationtimestamp| type| source ---|---|--- 2025-02-06 13:17:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6bm6g2r2r 2025-02-06 16:03:56+00:00| seen| https://t.me/cvedetector/17388 2025-02-06 16:43:49+00:00| seen|...

CVE-2024-13487

The The CURCY – Multi Currency for WooCommerce – The best free currency exchange plugin – Run smoothly on WooCommerce 9.x plugin for WordPress is vulnerable to arbitrary shortcode execution via the getproductsprice function in all versions up to, and including, 2.2.5. This is due to the software...

CVE-2021-37651

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.FractionalAvgPoolGrad can be tricked into accessing data outside of bounds of heap allocated buffers. The implementation does not validate that the input tensor is non-empt...

CVE-2021-31420

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.0-48950. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

CVE-2021-31482

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...