CVE-2025-23984

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainvireinfo Dynamic URL SEO dynamic-url-seo allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a through = 1.0...

CVE-2025-22681

creationtimestamp| type| source ---|---|--- 2025-02-03 14:40:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113940472158484998 2025-02-03 15:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtk4zk2w2i 2025-08-26 18:36:19+00:00| seen|...

CVE-2024-50500

creationtimestamp| type| source ---|---|--- 2025-02-03 14:25:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113940413082372940 2025-02-03 15:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtjqmab32c 2025-08-26 18:36:19+00:00| seen|...

CVE-2025-24574 WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pepro Dev. Group PeproDev WooCommerce Receipt Uploader pepro-bacs-receipt-upload-for-woocommerce allows Reflected XSS.This issue affects PeproDev WooCommerce Receipt Uploader: from n/a through =...

CVE-2025-23588

CVE-2025-23588 is a Reflected XSS in the WOW Best CSS Compiler WordPress plugin (affected: WOW Best CSS Compiler

CVE-2024-10395

No proper validation of the length of user input in httpservergetcontenttypefromextension...

CVE-2024-13347

creationtimestamp| type| source ---|---|--- 2025-02-03 06:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhavd4oufv2f 2025-02-03 09:27:14+00:00| seen| https://t.me/cvedetector/17056 2025-02-06 02:39:10+00:00| seen|...

CVE-2025-25066

nDPI through 4.12 has a potential stack-based buffer overflow in ndpiaddresscacherestore in lib/ndpicache.c...

CVE-2025-20637

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaonv5fbp2c 2025-02-03 07:46:48+00:00| seen| https://t.me/cvedetector/17046 2025-02-03 08:03:49+00:00| seen|...

CVE-2025-20636

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaont2rcx2p 2025-02-03 07:46:47+00:00| seen| https://t.me/cvedetector/17045 2025-02-03 08:03:46+00:00| seen|...

CVE-2025-20635

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09403752;...

CVE-2024-56946

Denial of service in DNS-over-QUIC in Technitium DNS Server = v13.2.2 allows remote attackers to permanently stop the server from accepting new DNS-over-QUIC connections by triggering unhandled exceptions in listener threads...

CVE-2024-53943

The NRadio N8-180 wireless receiver running NROS version 1.9.2.n3.c5 is vulnerable to Cross-Site Scripting (XSS) . The issue exists in the /cgi-bin/luci/nradio/basic/radio endpoint, where the 2.4 GHz and 5 GHz name parameters fail to properly neutralize input. An attacker can inject malicious Jav...

CVE-2024-57967

CVE-2024-57967 affects CyberArk Privileged Access Manager Self-Hosted (PVWA) prior to version 14.4. The issue, described across multiple sources, is a potential elevation of privileges linked to LDAP mapping within PVWA, with a CVSSv3.1 base score of 4.2 (Medium) and a network attack vector (high...

CVE-2025-0967

creationtimestamp| type| source ---|---|--- 2025-02-02 16:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh7gf2hujy2r 2025-02-02 19:13:53+00:00| seen| https://t.me/cvedetector/17029 2025-02-02 19:53:05+00:00| seen|...

CVE-2025-0949

creationtimestamp| type| source ---|---|--- 2025-02-01 19:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh57xyphjk2i 2025-02-01 21:26:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3780 2025-02-01 21:42:58+00:00| seen|...

CVE-2025-0944

creationtimestamp| type| source ---|---|--- 2025-02-01 13:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh4lufjtfq2i 2025-02-01 15:25:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3765 2025-02-01 15:37:40+00:00| seen|...

CVE-2024-12825

creationtimestamp| type| source ---|---|--- 2025-02-01 08:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433nwb6i2w 2025-02-01 09:26:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3748 2025-02-01 09:47:57+00:00| seen| https://t.me/cvedetector/17012...

CVE-2024-13371

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized arbitrary emails sending due to a missing capability check on the sendEmailToJobSeeker function in all versions up to, and including, 2.2.6. This makes it possible...

CVE-2024-12041

creationtimestamp| type| source ---|---|--- 2025-02-01 06:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ufoiklz2i 2025-02-01 07:16:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3721 2025-02-01 07:25:46+00:00| seen|...