Lucene search
+L

768 matches found

OSV
OSV
added 2025/12/16 6:15 p.m.8 views

CVE-2025-68150 Parse Server has Server-Side Request Forgery (SSRF) in Instagram OAuth Adapter

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.2 and 9.1.1-alpha.1, the Instagram authentication adapter allows clients to specify a custom API URL via the apiURL parameter in authData. This enables SSRF attacks and...

8.3CVSS6.9AI score0.00296EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.9 views

PT-2025-51774

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 8.6.2 Parse Server versions prior to 9.1.1-alpha.1 Description Parse Server, a backend deployable on Node.js infrastructure, contains a flaw in its Instagram authentication adapter. Prior to versions 8.6.2 and...

8.3CVSS6.6AI score0.00296EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.13 views

Parse Server 代码问题漏洞

Parse Server is an open source backend from Parse Platform Open Source that can be deployed to any infrastructure that can run Node.js. A code issue vulnerability exists in Parse Server versions prior to 8.6.2 and prior to 9.1.1-alpha.1, which stems from an SSRF vulnerability in the Instagram...

8.3CVSS6.8AI score0.00296EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/11 12:0 a.m.5 views

Fedora 41 : webkitgtk (2025-04c193ecfe)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-04c193ecfe advisory. Update to WebKitGTK 2.50.1: Improve text rendering performance. Fix audio playback broken on instagram. Fix rendering of layers with fractional transforms. F...

9.8CVSS7.7AI score0.00718EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
added 2025/11/03 8:5 a.m.10 views

A week in security (October 27 – November 2)

Last week on Malwarebytes Labs: Update Chrome now: 20 security fixes just landed How scammers use your data to create personalized tricks that work Ransomware gang claims Conduent breach: what you should watch for next Fake PayPal invoice from Geek Squad is a tech support scam Atlas browser’s...

6.9AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2025/10/27 2:53 p.m.7 views

How to set up two factor authentication (2FA) on your Instagram account

Two-factor authentication 2FA isn't foolproof, but it is one of the best ways to protect your accounts from hackers. It adds a small extra step when logging in, but that extra effort pays off. Instagram’s 2FA requires an additional code whenever you try to log in from an unrecognized device or...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/26 7:16 a.m.18 views

CVE-2025-10637

The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagr...

5.3CVSS6.1AI score0.00284EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/26 12:0 a.m.10 views

WordPress plugin Social Feed Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.6AI score0.00284EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/25 9:32 a.m.6 views

EUVD-2025-35922

The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagr...

5.3CVSS5.6AI score0.00284EPSS
SaveExploits0References5
NVD
NVD
added 2025/10/25 7:15 a.m.10 views

CVE-2025-10637

The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagr...

5.3CVSS0.00284EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/25 6:49 a.m.14 views

CVE-2025-10637 Social Feed Gallery <= 4.9.2 - Missing Authorization to Unauthenticated Information Exposure

The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagr...

5.3CVSS0.00284EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/10/25 6:49 a.m.6 views

CVE-2025-10637 Social Feed Gallery <= 4.9.2 - Missing Authorization to Unauthenticated Information Exposure

The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagr...

5.3CVSS5.7AI score0.00284EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/25 6:49 a.m.43 views

CVE-2025-10637

CVE-2025-10637 concerns the Social Feed Gallery (insta-gallery) WordPress plugin. Multiple connected sources confirm a vulnerability in versions

5.3CVSS5.7AI score0.00284EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/25 12:0 a.m.12 views

PT-2025-43718

Name of the Vulnerable Software and Affected Versions Social Feed Gallery plugin for WordPress versions prior to 4.9.3 Description The Social Feed Gallery plugin for WordPress is susceptible to Information Exposure due to inadequate user authorization verification. This allows unauthenticated...

5.3CVSS6.5AI score0.00284EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-7941

Malware in sbrugna...

4.8CVSS5.1AI score0.01028EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2018-5785

Malware in sbrugna...

6.1CVSS6.2AI score0.02273EPSS
SaveExploits5References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-12721

Malware in sbrugna...

7.8CVSS7.7AI score0.00858EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-9016

Malware in sbrugna...

6.1CVSS6.3AI score0.0078EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2015-9272

Malware in sbrugna...

6.5CVSS6.5AI score0.00867EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2018-2375

Malware in sbrugna...

6.1CVSS6.5AI score0.00957EPSS
SaveExploits2References4
Rows per page
Query Builder