CVE-2025-1475

creationtimestamp| type| source ---|---|--- 2025-03-07 07:37:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6806 2025-03-07 08:34:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrlz5bvjy2q 2025-03-07 09:48:55+00:00| seen|...

CVE-2024-13655

creationtimestamp| type| source ---|---|--- 2025-03-07 07:37:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6804 2025-03-07 08:34:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrlz4vzhl2u 2025-03-07 09:48:54+00:00| seen|...

CVE-2025-1309

creationtimestamp| type| source ---|---|--- 2025-03-07 07:37:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6801 2025-03-07 08:34:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrlz4luag2o 2025-03-07 09:48:54+00:00| seen|...

CVE-2024-57174

creationtimestamp| type| source ---|---|--- 2025-03-05 23:39:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5njut622r 2025-03-06 01:18:23+00:00| seen| https://t.me/cvedetector/19665 2025-03-06 22:33:49+00:00| published-proof-of-concept|...

CVE-2025-1639

creationtimestamp| type| source ---|---|--- 2025-03-04 05:01:11+00:00| published-proof-of-concept| Telegram/vguQSoDtfnSSMMh6g3qPKY0JcDG6idXQojUpnqu8LsOOPP8 2025-03-04 05:48:44+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114102588102913759 2025-03-04 07:04:09+00:00| seen|...

CVE-2024-51954

creationtimestamp| type| source ---|---|--- 2025-03-03 22:14:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljixxdygo626 2025-03-03 23:56:39+00:00| seen| https://t.me/cvedetector/19429 2025-03-04 03:48:26+00:00| seen|...

CVE-2025-27501

creationtimestamp| type| source ---|---|--- 2025-03-03 19:31:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6268 2025-03-03 19:46:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114100218515671455 2025-03-03 21:24:32+00:00| seen|...

CVE-2024-43169

creationtimestamp| type| source ---|---|--- 2025-03-03 17:49:05+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099758348614556 2025-03-04 19:33:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6401...

CVE-2025-26534

creationtimestamp| type| source ---|---|--- 2025-03-03 15:48:52+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285662621992...

CVE-2025-25150

creationtimestamp| type| source ---|---|--- 2025-03-03 15:48:52+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285625743491 2025-03-04 00:00:09+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljj5uet6o62d 2025-03-04 12:00:07+00:00| seen|...

CVE-2025-25122

creationtimestamp| type| source ---|---|--- 2025-03-03 15:48:51+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285578045325...

CVE-2025-25109

creationtimestamp| type| source ---|---|--- 2025-03-03 15:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285514836470...

CVE-2025-26967

creationtimestamp| type| source ---|---|--- 2025-03-03 14:30:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6216 2025-03-03 15:48:54+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285750415310 2026-04-01 21:28:56+00:00| seen|...

CVE-2025-1852

creationtimestamp| type| source ---|---|--- 2025-03-02 20:36:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114094754589427815 2025-03-03 06:29:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6151 2025-03-03 07:48:44+00:00| seen|...

BIT-MASTODON-2025-27157 Mastodon's rate-limits are missing on `/auth/setup`

Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and 4.3.4, the rate limits are missing on /auth/setup. Without those rate limits, an attacker can craft requests that will send an email to an arbitrary addresses. Versions 4.2.16 a...

BIT-MASTODON-2025-27399 Mastodon's domain blocks & rationales ignore user approval when visibility set as "users"

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" localized English string: "To logged-in users", users that are not yet approved can view the block reasons. Instance admins...

CVE-2025-27157

Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and 4.3.4, the rate limits are missing on /auth/setup. Without those rate limits, an attacker can craft requests that will send an email to an arbitrary addresses. Versions 4.2.16 a...

CVE-2025-27399

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" localized English string: "To logged-in users", users that are not yet approved can view the block reasons. Instance admins...

CVE-2024-12544

creationtimestamp| type| source ---|---|--- 2025-03-01 08:27:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6059 2025-03-01 09:48:04+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114086542311660523 2025-03-01 10:35:34+00:00| seen|...

CVE-2024-9193

creationtimestamp| type| source ---|---|--- 2025-02-28 09:27:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5861 2025-02-28 11:10:25+00:00| seen| https://t.me/cvedetector/19137 2025-02-28 11:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114081354425742314 2025-03-...