CVE-2024-56964

An issue in Che Hao Duo Used Automobile Agency Beijing Co., Ltd Guazi Used Car iOS 10.15.1 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56948

creationtimestamp| type| source ---|---|--- 2025-01-27 18:49:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113901814745144782 2025-01-27 19:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnnjwp562f 2025-01-27 22:25:00+00:00| seen|...

CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

CVE-2025-24356 UDP traffic amplification via fastd's fast reconnect feature

fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This "fast...

CVE-2025-24356

fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This "fast...

CVE-2024-27256

creationtimestamp| type| source ---|---|--- 2025-01-27 16:36:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113901292405068539 2025-01-27 17:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgwy6dtz2r...

CVE-2023-52292

creationtimestamp| type| source ---|---|--- 2025-01-27 16:14:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113901204902829019 2025-01-27 16:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdmftjcx2r 2025-01-27 17:40:27+00:00| seen|...

CVE-2024-45598

creationtimestamp| type| source ---|---|--- 2025-01-27 15:51:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113901113279203094 2025-01-27 16:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdms73z22e 2025-01-27 17:40:18+00:00| seen|...

CVE-2025-24590

creationtimestamp| type| source ---|---|--- 2025-01-27 15:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqabxlajn2r...

CVE-2025-24538

creationtimestamp| type| source ---|---|--- 2025-01-27 15:16:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqabsjxzp2n...

CVE-2025-23849

creationtimestamp| type| source ---|---|--- 2025-01-27 15:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqabkf4mt2c...

CVE-2025-24600

Missing Authorization vulnerability in davidfcarr RSVPMarker rsvpmaker.This issue affects RSVPMarker : from n/a through = 11.4.5...

CVE-2025-24540

CVE-2025-24540 is a CSRF vulnerability in the WordPress plugin SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd (versions n/a through 6.18.9). The flaw affects the SeedProd plugin’s CSRF protection, enabling cross-site forgery in affected installs. The reported CVSS-li...

CVE-2025-24593 WordPress Edwiser Bridge plugin <= 3.0.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Reflected XSS.This issue affects Edwiser Bridge: from n/a through = 3.0.8...

CVE-2025-23656

CVE-2025-23656 describes a Missing Authorization vulnerability in the WordPress plugin Donate visa (Saul Morales Pacheco) that allows Stored Cross-Site Scripting (XSS) in versions n/a through 1.0.0. The vulnerability arises from missing authorization controls, enabling an attacker to inject and p...

GHSA-93Q8-GQ69-WQMW

creationtimestamp| type| source ---|---|--- 2025-01-27 12:33:00+00:00| seen| https://gist.github.com/SavyFrost/a7bbd84d59f72f3c2cfed44779ad0793...

CVE-2025-24390

creationtimestamp| type| source ---|---|--- 2025-01-27 06:16:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc476wbo27 2025-01-27 06:49:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxjk3tk2r 2025-01-27 07:06:47+00:00| seen|...

CVE-2024-43446

creationtimestamp| type| source ---|---|--- 2025-01-27 06:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc3zuup62i 2025-01-27 06:49:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxjwwxs2r 2025-01-27 06:51:47+00:00| seen|...

CVE-2025-24389

Certain errors of the upstream libraries will insert sensitive information in the OTRS or OTRS Community Edition log mechanism and mails send to the system administrator. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS...

CVE-2024-56954

An issue in Beijing Baidu Netcom Science & Technology Co Ltd Haokan Video iOS 7.70.0 allows attackers to access sensitive user information via supplying a crafted link...