Discourse 访问控制错误漏洞

Discourse is an open source community discussion platform from Discourse Open Source. The platform includes features such as communities, email, and chat rooms. An access control error vulnerability exists in Discourse versions prior to 3.4.3 and prior to 3.5.0.beta3, which stems from bypassing...

PT-2025-18290 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.4.3 Discourse versions prior to 3.5.0.beta3 Description: Discourse is an open-source discussion platform. In versions prior to 3.4.3 on the stable branch and 3.5.0.beta3 on the beta branch, the user limit for a...

WordPress BP Messages Tool plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin BP Messages Tool versions = 2.2...

CVE-2025-46575

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

Fortra GoAnywhere 安全漏洞

Fortra GoAnywhere is a secure file transfer solution from Fortra USA. A security vulnerability exists in Fortra GoAnywhere versions prior to 7.8.0, which stems from an error message containing an absolute server path that could lead to application mapping ambiguity testing...

CVE-2025-46575

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

CVE-2025-46574

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

CVE-2025-46575

Technical details about CVE-2025-46575 are not publicly available in the provided connected documents. Monitor for updates from official advisories for affected products, fixes, and exploit information.

CVE-2025-46575 ZTE GoldenDB Database product has an information disclosure vulnerability

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

CVE-2025-46574 ZTE GoldenDB Database product has an input validation vulnerability

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

CVE-2025-46574

CVE-2025-46574 involves the GoldenDB database product from ZTE, where an input validation vulnerability can lead to information disclosure. The connected sources consistently describe that attackers may cause the system to reveal sensitive data by exploiting how invalid inputs are handled, specif...

CVE-2025-46574 ZTE GoldenDB Database product has an input validation vulnerability

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information...

PT-2025-17973 · Goldendb · Goldendb

Name of the Vulnerable Software and Affected Versions: GoldenDB affected versions not specified Description: The issue is related to an information disclosure problem. Attackers can exploit error messages to obtain the system's sensitive information. Recommendations: At the moment, there is no...

PT-2025-17974 · Goldendb · Goldendb

Name of the Vulnerable Software and Affected Versions: GoldenDB affected versions not specified Description: The issue is related to an information disclosure problem. Attackers can exploit error messages to obtain the system's sensitive information. Recommendations: At the moment, there is no...

CVE-2025-39379

creationtimestamp| type| source ---|---|--- 2025-04-25 14:07:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13428...

BIT-MOODLE-2024-43439 Moodle: reflected xss via h5p error message

A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting XSS risk...

SUSE CVE-2025-43973

An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message...

CVE-2025-25045

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system...

CVE-2025-25045 IBM InfoSphere Information Server information disclosure

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system...

RHSA-2019:0679

creationtimestamp| type| source ---|---|--- 2025-04-23 20:04:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13135 2025-04-23 20:04:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13136 2025-04-23 20:04:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13137...