CVE-2025-0458

creationtimestamp| type| source ---|---|--- 2025-01-14 16:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpnkapczw2f 2025-01-14 16:48:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfppeb37wl2q 2025-01-14 18:10:53+00:00| seen|...

CVE-2025-22984

An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...

CVE-2024-56374

creationtimestamp| type| source ---|---|--- 2025-01-14 15:44:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lfplsm3dgw23 2025-01-14 19:09:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1564 2025-01-14 19:16:18+00:00| seen|...

CVE-2025-0458

CVE-2025-0458 affects Virtual Computer Vysual RH Solution 2024.12.1, where the Login Panel’s /index.php contains vulnerable functionality. The described issue arises from manipulating the page argument, enabling remote cross-site scripting (XSS). The vulnerability is publicly disclosed and attack...

CVE-2024-39770

creationtimestamp| type| source ---|---|--- 2025-01-14 15:18:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkcmreht2c 2025-01-14 15:49:56+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113827498624838807...

CVE-2024-34544

creationtimestamp| type| source ---|---|--- 2025-01-14 15:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpk6vsopn2r...

CVE-2024-38666

An external config control vulnerability exists in the openvpn.cgi openvpnclientsetup functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2024-48890

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwyuidj2r 2025-01-14 15:39:39+00:00| seen| https://t.me/cvedetector/15255 2025-01-14 16:28:27+00:00| seen|...

CVE-2025-0145

creationtimestamp| type| source ---|---|--- 2025-01-14 11:28:45+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lfp5im2auc27 2025-01-30 19:50:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113919041920117244 2025-01-30 20:16:17+00:00| seen|...

CVE-2024-28024

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...

CVE-2025-20016

creationtimestamp| type| source ---|---|--- 2025-01-14 09:38:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113826039802763859 2025-01-14 10:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfozfmwuuy2f 2025-01-14 10:21:57+00:00| seen|...

CVE-2025-23033

creationtimestamp| type| source ---|---|--- 2025-01-14 01:18:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3fujit52b 2025-01-14 03:07:09+00:00| seen| https://t.me/cvedetector/15208 2025-01-14 04:31:42+00:00| seen|...

CVE-2025-23032

creationtimestamp| type| source ---|---|--- 2025-01-14 01:18:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3frwu6d2s 2025-01-14 03:07:18+00:00| seen| https://t.me/cvedetector/15216 2025-01-14 04:31:41+00:00| seen|...

CVE-2024-57639

creationtimestamp| type| source ---|---|--- 2025-01-14 01:16:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cj4o6p2n 2025-01-14 02:01:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113824241418005061 2025-01-15 15:55:17+00:00|...

CVE-2024-57636

creationtimestamp| type| source ---|---|--- 2025-01-14 01:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cbvepu2r 2025-01-14 01:46:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113824182388487639...

CVE-2024-11396

The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.3 via the Visitors List Export file. During the export, a CSV file is created in the wp-content folder with a hardcoded filena...

CVE-2024-57658

An issue in the sqltreehash1 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57654

creationtimestamp| type| source ---|---|--- 2025-01-14 01:08:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1436 2025-01-14 01:17:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dok4w32p 2025-01-14 02:46:34+00:00| seen|...

CVE-2024-12298

creationtimestamp| type| source ---|---|--- 2025-01-14 01:07:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1422 2025-01-14 01:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3aks7t32r...

CVE-2025-0068 Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP

An obsolete functionality in SAP NetWeaver Application Server ABAP did not perform necessary authorization checks. Because of this, an authenticated attacker could obtain information that would otherwise be restricted. It has no impact on integrity or availability on the application...