CVE-2025-24398

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 both inclusive allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins...

CVE-2025-23914 WordPress Muzaara Google Ads Report Plugin <= 3.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in muzaara Muzaara Google Ads Report muzaara-adwords-optimize-dashboard allows Object Injection.This issue affects Muzaara Google Ads Report: from n/a through = 3.1...

CVE-2025-23846

creationtimestamp| type| source ---|---|--- 2025-01-22 15:21:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo7hw2oo2r 2025-01-22 17:13:51+00:00| seen| https://t.me/cvedetector/16111...

CVE-2025-23605

creationtimestamp| type| source ---|---|--- 2025-01-22 15:19:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo4bk7ic2h...

CVE-2025-23602

creationtimestamp| type| source ---|---|--- 2025-01-22 15:19:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo3zord22t 2025-01-22 20:02:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2638...

CVE-2025-23475

creationtimestamp| type| source ---|---|--- 2025-01-22 15:18:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo24axcz2x 2025-01-22 18:02:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2597...

CVE-2023-37019

creationtimestamp| type| source ---|---|--- 2025-01-22 15:17:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdnymx4fg27...

CVE-2025-23610

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tehsmash Ultimate Events ultimate-events allows Reflected XSS.This issue affects Ultimate Events: from n/a through = 1.3.3...

CVE-2025-23602

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Europe Ecologie Les Verts EELV Newsletter eelv-newsletter allows Reflected XSS.This issue affects EELV Newsletter: from n/a through = 4.8.2...

CVE-2023-37002

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an E-RAB Modification Indication message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...

CVE-2025-23949

CVE-2025-23949 affects the WordPress plugin “Improved Sale Badges – Free Version” and is described as an "Improp er Control of Filename for Include/Require Statement" vulnerability (PHP Remote File Inclusion) that allows local file inclusion. The affected range is from n/a through 1.0.1. The Red ...

CVE-2025-23697 WordPress Podčlánková inzerce plugin <= 2.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webdeal Podčlánková inzerce podclankova-inzerce allows Reflected XSS.This issue affects Podčlánková inzerce: from n/a through = 2.4.0...

CVE-2025-23681

CVE-2025-23681 describes a Reflected XSS in the WordPress plugin REDIRECTION PLUS (jannatqualitybacklinks.com) via improper input neutralization during web page generation. Affected versions are REDIRECTION PLUS up to 2.0.0 (from n/a through 2.0.0). Exploitation would involve injecting script tha...

CVE-2024-11218

creationtimestamp| type| source ---|---|--- 2025-01-22 05:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcmfcomg62x 2025-01-22 05:39:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgcnp44vdz2e 2025-01-22 05:39:18+00:00| seen|...

CVE-2025-23087

CVE-2025-23087 entry is rejected/not used per CVE Program; it does not represent an active vulnerability.

Oracle MySQL Server 9.0 - 9.1.0 Security Update (cpujan2025) - Linux

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

CVE-2024-49734

creationtimestamp| type| source ---|---|--- 2025-01-21 23:17:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbydwzlpl2j 2025-01-21 23:50:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgc26jogrw2e 2025-01-22 01:20:50+00:00| seen|...

CVE-2024-43763

creationtimestamp| type| source ---|---|--- 2025-01-21 23:16:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbydbbxx32j 2025-01-21 23:50:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgc26iz3t52g 2025-01-22 01:21:09+00:00| seen|...

CVE-2024-24428

creationtimestamp| type| source ---|---|--- 2025-01-21 23:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbycundgc2n...

CVE-2023-27113

creationtimestamp| type| source ---|---|--- 2025-01-21 22:01:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2492 2025-01-21 22:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbuvmcyj22b 2025-01-21 23:40:33+00:00| seen|...