CVE-2025-22610

creationtimestamp| type| source ---|---|--- 2025-01-24 16:41:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113884325135258816 2025-01-24 17:05:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2952 2025-01-24 19:25:35+00:00| seen|...

CVE-2024-9490

creationtimestamp| type| source ---|---|--- 2025-01-24 14:28:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113883802301120482 2025-01-24 15:04:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2914 2025-01-24 15:48:53+00:00| seen|...

CVE-2024-11913

creationtimestamp| type| source ---|---|--- 2025-01-24 13:42:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113883622022632217 2025-01-24 14:04:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2901 2025-01-24 16:04:35+00:00| seen|...

CVE-2025-23422

CVE-2025-23422 (WordPress Store Locator) A path traversal vulnerability in the NotFound Store Locator plugin (WordPress) allows PHP Local File Inclusion. Affected: Store Locator versions up to 3.98.10 (and possibly listed as NotFound Store Locator). Root cause: improper restriction of pathnames t...

CVE-2024-55930 Weak default folder permissions

Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files...

CVE-2024-55928

Summary: CVE-2024-55928 affects Xerox Workplace Suite. Public docs confirm the issue involves secrets exposed in clear text (locally and remotely) due to insecure handling, with the likely impact of unauthorized access to sensitive secrets. Affected product/details: Xerox Workplace Suite (print m...

CVE-2025-0650

creationtimestamp| type| source ---|---|--- 2025-01-23 17:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf3rspbe2f 2025-01-23 17:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggggv7l7a2u 2025-01-23 17:40:10+00:00| seen|...

CVE-2024-12078

creationtimestamp| type| source ---|---|--- 2025-01-23 17:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf3524lv27 2025-01-23 17:40:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggggugueo2k 2025-01-23 19:09:14+00:00| seen|...

CVE-2024-11147

creationtimestamp| type| source ---|---|--- 2025-01-23 17:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf32rmm32e 2025-01-23 17:40:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggggv4c3y2g 2025-01-23 19:09:17+00:00| seen|...

CVE-2024-55925

In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly validates or trusts the Host header without verifying the actual destination, an attacker can forge a value to gain unauthorized access. This exploit targets...

CVE-2025-23894

creationtimestamp| type| source ---|---|--- 2025-01-23 16:17:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbsirukn2c 2025-01-23 16:55:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggdwfrpbh2q 2025-01-23 18:18:43+00:00| seen|...

CVE-2025-23834

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbsbqehx2p 2025-01-23 16:55:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggdwekqzg2g 2025-01-23 18:18:41+00:00| seen|...

CVE-2025-23723

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbrqum772f 2025-01-23 16:55:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggdwfam5i2h 2025-01-23 18:18:48+00:00| seen|...

CVE-2025-23634

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbrjwrc22j 2025-01-23 16:55:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lggdwe6kg52k 2025-01-23 18:19:03+00:00| seen|...

CVE-2025-23545

creationtimestamp| type| source ---|---|--- 2025-01-23 16:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbr5naun2c 2025-01-23 18:18:57+00:00| seen| https://t.me/cvedetector/16200...

CVE-2025-23540

creationtimestamp| type| source ---|---|--- 2025-01-23 15:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113878382152309201 2025-01-23 15:34:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113878400792489848 2025-01-23 16:16:13+00:00| seen|...

CVE-2024-45341

A flaw was found in the crypto/x509 package of the Golang standard library. A certificate with a URI, which has a IPv6 address with a zone ID, may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI; this...

CVE-2025-0648

CVE-2025-0648 affects M-Files Server prior to 25.1.14445.5 and prior to 24.8 LTS SR3. A highly privileged attacker can cause a denial of service by changing configuration, triggering an unexpected crash in the database driver. Remediation: upgrade to 25.1.14445.5 or newer, or to 24.8 LTS SR3 or n...

CVE-2024-42182

The CVE-2024-42182 entry concerns HCL BigFix Patch Download Plug-ins and an SSRF flaw that can cause the application to fetch files from an internally hosted server (localhost). The root cause is a server-side request forgery vulnerability in the plug-ins’ handling of local requests. Reported imp...

CVE-2024-56924

creationtimestamp| type| source ---|---|--- 2025-01-22 21:02:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2653 2025-01-22 21:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgebyxmka72j 2025-01-22 21:40:04+00:00| seen|...