CVE-2025-1570

creationtimestamp| type| source ---|---|--- 2025-02-28 09:27:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5857 2025-02-28 10:00:46+00:00| seen| Telegram/tzst3T7SuESeL4Dw73eYpZnj8xogMY6-vkCUQFTMfYlq5w 2025-02-28 11:10:18+00:00| seen| https://t.me/cvedetector/19132 2025-02-28 11:48:48+00:0...

CVE-2024-9195

creationtimestamp| type| source ---|---|--- 2025-02-28 09:27:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5855 2025-02-28 11:10:26+00:00| seen| https://t.me/cvedetector/19138 2025-02-28 11:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114081354477370456...

CVE-2024-8420

creationtimestamp| type| source ---|---|--- 2025-02-28 09:27:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5853 2025-02-28 11:10:33+00:00| seen| https://t.me/cvedetector/19143 2025-02-28 11:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114081354358777265...

CVE-2025-25570

creationtimestamp| type| source ---|---|--- 2025-02-28 01:08:16+00:00| seen| https://t.me/cvedetector/19102 2025-02-28 01:53:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccu2uix2w 2025-02-28 17:27:11+00:00| published-proof-of-concept|...

CVE-2024-38291

creationtimestamp| type| source ---|---|--- 2025-02-28 01:08:15+00:00| seen| https://t.me/cvedetector/19100 2025-02-28 01:53:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7cct45yb25 2025-02-28 17:27:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5928 2025-02-28...

CVE-2025-26325

creationtimestamp| type| source ---|---|--- 2025-02-28 01:08:13+00:00| seen| https://t.me/cvedetector/19098 2025-02-28 01:53:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7cctuxwh27 2025-02-28 19:49:12+00:00| seen|...

CVE-2025-1682

creationtimestamp| type| source ---|---|--- 2025-02-28 00:25:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5825 2025-02-28 01:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114078994918555296 2025-02-28 03:38:46+00:00| seen| https://t.me/cvedetector/19105 2025-03-...

CVE-2025-1687

creationtimestamp| type| source ---|---|--- 2025-02-28 00:25:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5824 2025-02-28 01:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114078994955411295 2025-02-28 03:38:47+00:00| seen|...

CVE-2024-12811

creationtimestamp| type| source ---|---|--- 2025-02-28 00:25:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5823 2025-02-28 01:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114078994875616042 2025-02-28 03:38:53+00:00| seen| https://t.me/cvedetector/19111 2025-03-...

CVE-2024-36046

creationtimestamp| type| source ---|---|--- 2025-02-27 23:25:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5821 2025-02-28 00:02:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114078577366616418 2025-02-28 01:08:09+00:00| seen| https://t.me/cvedetector/19097 2025-02-28...

CVE-2024-37566

creationtimestamp| type| source ---|---|--- 2025-02-27 23:25:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5819 2025-02-28 00:02:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114078577366616418 2025-02-28 01:08:08+00:00| seen| https://t.me/cvedetector/19095 2025-02-28...

CVE-2024-41340

creationtimestamp| type| source ---|---|--- 2025-02-27 21:35:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114078000233980303 2025-02-27 21:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6va2dqje2y 2025-02-27 23:26:53+00:00| seen| https://t.me/cvedetector/190...

CVE-2024-41339

creationtimestamp| type| source ---|---|--- 2025-02-27 21:35:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114078000233980303 2025-02-27 21:59:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6v7zuxbm27 2025-02-27 23:26:52+00:00| seen| https://t.me/cvedetector/190...

CVE-2025-27399

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" localized English string: "To logged-in users", users that are not yet approved can view the block reasons. Instance admins...

CVE-2025-27157

Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and 4.3.4, the rate limits are missing on /auth/setup. Without those rate limits, an attacker can craft requests that will send an email to an arbitrary addresses. Versions 4.2.16 a...

CVE-2025-27399 Mastodon's domain blocks & rationales ignore user approval when visibility set as "users"

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" localized English string: "To logged-in users", users that are not yet approved can view the block reasons. Instance admins...

CVE-2025-27399 Mastodon's domain blocks & rationales ignore user approval when visibility set as "users"

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" localized English string: "To logged-in users", users that are not yet approved can view the block reasons. Instance admins...

CVE-2025-27399

Summary: Mastodon contains an access-control bug where, when domain blocks/reasons visibility is set to the English string “To logged-in users,” users not yet approved can view the block reasons. Affected versions: before 4.1.23, 4.2.16, and 4.3.4. Impact: instance admins who rely on private doma...

CVE-2025-27399 Mastodon's domain blocks & rationales ignore user approval when visibility set as "users"

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain blocks/reasons is set to "users" localized English string: "To logged-in users", users that are not yet approved can view the block reasons. Instance admins...

CVE-2025-27157 Mastodon's rate-limits are missing on `/auth/setup`

Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and 4.3.4, the rate limits are missing on /auth/setup. Without those rate limits, an attacker can craft requests that will send an email to an arbitrary addresses. Versions 4.2.16 a...