CVE-2024-55925

In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly validates or trusts the Host header without verifying the actual destination, an attacker can forge a value to gain unauthorized access. This exploit targets...

CVE-2025-23894

creationtimestamp| type| source ---|---|--- 2025-01-23 16:17:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbsirukn2c 2025-01-23 16:55:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggdwfrpbh2q 2025-01-23 18:18:43+00:00| seen|...

CVE-2025-23834

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbsbqehx2p 2025-01-23 16:55:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggdwekqzg2g 2025-01-23 18:18:41+00:00| seen|...

CVE-2025-23723

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbrqum772f 2025-01-23 16:55:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggdwfam5i2h 2025-01-23 18:18:48+00:00| seen|...

CVE-2025-23634

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbrjwrc22j 2025-01-23 16:55:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggdwe6kg52k 2025-01-23 18:19:03+00:00| seen|...

CVE-2025-23545

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbr5naun2c 2025-01-23 18:18:57+00:00| seen| https://t.me/cvedetector/16200...

CVE-2025-23540

creationtimestamp| type| source ---|---|--- 2025-01-23 15:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113878382152309201 2025-01-23 15:34:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113878400792489848 2025-01-23 16:16:13+00:00| seen|...

CVE-2024-45341

A flaw was found in the crypto/x509 package of the Golang standard library. A certificate with a URI, which has a IPv6 address with a zone ID, may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI; this...

CVE-2025-0648

CVE-2025-0648 affects M-Files Server prior to 25.1.14445.5 and prior to 24.8 LTS SR3. A highly privileged attacker can cause a denial of service by changing configuration, triggering an unexpected crash in the database driver. Remediation: upgrade to 25.1.14445.5 or newer, or to 24.8 LTS SR3 or n...

CVE-2024-42182

The CVE-2024-42182 entry concerns HCL BigFix Patch Download Plug-ins and an SSRF flaw that can cause the application to fetch files from an internally hosted server (localhost). The root cause is a server-side request forgery vulnerability in the plug-ins’ handling of local requests. Reported imp...

CVE-2024-56924

creationtimestamp| type| source ---|---|--- 2025-01-22 21:02:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2653 2025-01-22 21:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgebyxmka72j 2025-01-22 21:40:04+00:00| seen|...

CVE-2025-24398

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 both inclusive allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins...

CVE-2025-23914 WordPress Muzaara Google Ads Report Plugin <= 3.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in muzaara Muzaara Google Ads Report muzaara-adwords-optimize-dashboard allows Object Injection.This issue affects Muzaara Google Ads Report: from n/a through = 3.1...

CVE-2025-23846

creationtimestamp| type| source ---|---|--- 2025-01-22 15:21:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo7hw2oo2r 2025-01-22 17:13:51+00:00| seen| https://t.me/cvedetector/16111...

CVE-2025-23605

creationtimestamp| type| source ---|---|--- 2025-01-22 15:19:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo4bk7ic2h...

CVE-2025-23602

creationtimestamp| type| source ---|---|--- 2025-01-22 15:19:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo3zord22t 2025-01-22 20:02:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2638...

CVE-2025-23475

creationtimestamp| type| source ---|---|--- 2025-01-22 15:18:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo24axcz2x 2025-01-22 18:02:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2597...

CVE-2023-37019

creationtimestamp| type| source ---|---|--- 2025-01-22 15:17:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdnymx4fg27...

CVE-2025-23610

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tehsmash Ultimate Events ultimate-events allows Reflected XSS.This issue affects Ultimate Events: from n/a through = 1.3.3...

CVE-2025-23602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Reflected XSS.This issue affects EELV Newsletter: from n/a through = 4.8.2...