Zabbix universal monitoring system Privilege Escalation

The vulnerability of the Zabbix universal monitoring system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

IBM Concert Information Disclosure Vulnerability (CNVD-2025-29675)

IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform released in May 2024 by IBM. IBM Concert suffers from an information disclosure vulnerability that stems from the disclosure of sensitive system informatio...

CVE-2025-22779

creationtimestamp| type| source ---|---|--- 2025-01-15 16:17:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfs63znpyb2t 2025-01-15 16:57:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfsae7ptav2e 2025-01-15 17:38:19+00:00| seen|...

PT-2025-12837

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.177 Firefox versions prior to 136.0.4 Firefox ESR versions prior to 128.8.1 Firefox ESR versions prior to 115.21.1 Opera versions prior to 117.0.5408.163 Description An issue in the Mojo inter-process...

CVE-2025-21400

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:18:22+00:00| see...

CVE-2025-21336

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpum6b2pw2t 2025-01-15 01:41:34+00:00| seen|...

CVE-2024-27778

creationtimestamp| type| source ---|---|--- 2025-01-14 14:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpguugosw2d 2025-01-14 14:43:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113827237069065318 2025-01-14 14:48:24+00:00| seen|...

CVE-2024-57655

creationtimestamp| type| source ---|---|--- 2025-01-14 01:07:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1433 2025-01-14 01:17:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dqzd2i2j 2025-01-14 03:01:35+00:00| seen|...

CVE-2024-51456

creationtimestamp| type| source ---|---|--- 2025-01-12 13:32:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113815632168521609 2025-01-12 14:04:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1339 2025-01-12 14:15:29+00:00| seen|...

CVE-2024-11386

creationtimestamp| type| source ---|---|--- 2025-01-11 07:27:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113808537671058257 2025-01-11 08:03:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1279 2025-01-11 08:15:44+00:00| seen|...

CVE-2024-12472

creationtimestamp| type| source ---|---|--- 2025-01-11 02:43:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113807419180725614 2025-01-11 03:04:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1263 2025-01-11 03:15:57+00:00| seen|...

CVE-2024-9133

creationtimestamp| type| source ---|---|--- 2025-01-10 21:43:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113806241219929500 2025-01-10 22:05:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1254 2025-01-10 22:16:14+00:00| seen|...

CVE-2024-33298

creationtimestamp| type| source ---|---|--- 2025-01-10 19:34:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113805731848129659 2025-01-10 20:07:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1218 2025-01-10 20:15:59+00:00| seen|...

CVE-2024-54847

creationtimestamp| type| source ---|---|--- 2025-01-10 16:25:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113804988018389382 2025-01-10 17:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lffozr7rr622 2025-01-10 17:54:12+00:00| seen|...

CVE-2025-22949

creationtimestamp| type| source ---|---|--- 2025-01-10 15:23:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113804747178321116 2025-01-10 16:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfflpbrjer2k 2025-01-10 18:00:41+00:00| seen|...

WordPress Backlink Monitoring Manager plugin <= 0.1.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Backlink Monitoring Manager versions = 0.1.3...

CVE-2024-12714

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-10815

creationtimestamp| type| source ---|---|--- 2025-01-09 06:01:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113796873432910002 2025-01-09 06:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzobqkor25 2025-01-09 06:21:40+00:00| seen|...

CVE-2024-12714 Backlink Monitoring Manager <= 0.1.3 - Reflected XSS

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12714 Backlink Monitoring Manager <= 0.1.3 - Reflected XSS

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...