RHSA-2025:2521

creationtimestamp| type| source ---|---|--- 2025-03-11 11:41:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7126 2025-03-27 22:36:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9234...

WordPress Coronavirus (COVID-19) Notice Message plugin <= 1.1.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Coronavirus COVID-19 Notice Message versions = 1.1.2...

CVE-2025-0629

The Coronavirus COVID-19 Notice Message WordPress plugin through 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

CVE-2025-0629 Coronavirus (COVID-19) Notice Message <= 1.1.2 - Admin+ Stored XSS

The Coronavirus COVID-19 Notice Message WordPress plugin through 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

CVE-2025-0629

The Coronavirus (COVID-19) Notice Message WordPress plugin, affecting versions through 1.1.2 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators,...

PT-2025-10698

Name of the Vulnerable Software and Affected Versions Coronavirus COVID-19 Notice Message WordPress plugin version 1.1.2 Description The issue concerns the Coronavirus COVID-19 Notice Message WordPress plugin, which does not properly sanitise and escape some of its settings. This could allow high...

WordPress plugin Maintenance Notice 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers. A cross-site request forgery...

CVE-2025-28859: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CodeVibrant Maintenance Notice maintenance-notice allows Cross Site Request Forgery.This issue affects Maintenance Notice: from n/a through = 1.0.6...

CVE-2025-0629: Improper Neutralization of Input During Web Page Generation

The Coronavirus COVID-19 Notice Message WordPress plugin through 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

Ubuntu: Security Advisory (USN-7330-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7322-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2022-24976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a...

Linux Distros Unpatched Vulnerability : CVE-2024-26743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/qedr: Fix qedrcreateuserqp error flow Avoid the following warning by making sure to free the allocated resources in case that qedrinituserqueue fail...

Linux Distros Unpatched Vulnerability : CVE-2021-46923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that finishmountkattr is called after...

Linux Distros Unpatched Vulnerability : CVE-2023-2269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in tableclear in drivers/md/dm-ioctl.c in the Linux...

Linux Distros Unpatched Vulnerability : CVE-2017-16537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The imonprobe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference a...

CVE-2025-1833

A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is the function sendNotice of the file src/main/java/com/futvan/z/erp/customernotice/CustomernoticeAction.java of the component HTTP Request Handler. The manipulation of the argumen...

Mozilla Updates Firefox Terms Again After Backlash Over Broad Data License Language

Firefox browser maker Mozilla on Friday updated its Terms of Use a second time within a week following criticism overbroad language that appeared to give the company the rights to all information uploaded by users. The revised Terms of Use now states - You give Mozilla the rights necessary to...

CVE-2025-25379

creationtimestamp| type| source ---|---|--- 2025-02-28 23:27:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6022 2025-03-01 02:13:47+00:00| seen| https://t.me/cvedetector/19197 2025-03-02 11:46:30+00:00| seen| Telegram/C0OXpo2dHPnljw7MS-EyKvrdB93A96NtlABXMGO8LBw1MzD...

RHSA-2024:8984

creationtimestamp| type| source ---|---|--- 2025-02-27 17:25:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5724 2025-03-11 02:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7100 2025-04-10 21:49:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11358...