CVE-2024-52500

creationtimestamp| type| source ---|---|--- 2025-02-14 12:49:42+00:00| seen| https://infosec.exchange/users/cve/statuses/114002321875800724 2025-02-14 12:53:39+00:00| seen| https://infosec.exchange/users/cve/statuses/114002337412807048 2025-02-14 13:16:04+00:00| seen|...

CVE-2025-23771 WordPress Push Notification for Post and BuddyPress plugin <= 2.11 - Settings Change vulnerability

Missing Authorization vulnerability in Murali Push Notification for Post and BuddyPress push-notification-for-post-and-buddypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Push Notification for Post and BuddyPress: from n/a through = 2.11...

CVE-2025-23771

CVE-2025-23771 describes a Missing Authorization vulnerability in the WordPress plugin Push Notification for Post and BuddyPress (Murali Push Notification for Post and BuddyPress). Affected versions are from n/a through 2.11. The issue stems from incorrectly configured access control levels, enab...

CVE-2025-26523

creationtimestamp| type| source ---|---|--- 2025-02-14 12:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li56mnso2b2h 2025-02-14 13:30:25+00:00| seen| Telegram/mq9OGphltNzAfXrK28jKvoPpWjVBtqMeBmm56jWdzOViFs 2025-02-14 14:44:48+00:00| seen|...

CVE-2025-26522

creationtimestamp| type| source ---|---|--- 2025-02-14 12:16:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li56mkzjve2g 2025-02-14 13:30:25+00:00| seen| Telegram/mq9OGphltNzAfXrK28jKvoPpWjVBtqMeBmm56jWdzOViFs 2025-02-14 14:44:49+00:00| seen|...

CVE-2025-0821

creationtimestamp| type| source ---|---|--- 2025-02-14 11:13:20+00:00| seen| https://infosec.exchange/users/cve/statuses/114001942944019640 2025-02-14 11:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li537mbcp62a 2025-02-14 13:14:58+00:00| seen|...

CVE-2024-13735

creationtimestamp| type| source ---|---|--- 2025-02-14 09:29:30+00:00| seen| https://infosec.exchange/users/cve/statuses/114001534633593944 2025-02-14 10:16:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4xwlt7gz2s 2025-02-14 10:44:38+00:00| seen|...

CVE-2025-26789

creationtimestamp| type| source ---|---|--- 2025-02-14 07:55:06+00:00| seen| https://infosec.exchange/users/cve/statuses/114001163436210656 2025-02-14 08:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4r6gdwiw2g 2025-02-14 10:10:43+00:00| seen|...

acmailer CGI and acmailer DB vulnerable to OS command injection

Overview acmailer CGI and acmailer DB provided by Extra Innovation Inc. contain an OS command injection vulnerability CWE-78. Extra Innovation Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Extra Innovation Inc. coordinated under the...

CVE-2024-13493

creationtimestamp| type| source ---|---|--- 2025-02-14 06:06:16+00:00| seen| https://infosec.exchange/users/cve/statuses/114000735493955219 2025-02-14 06:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4kibtauv2c 2025-02-14 07:09:51+00:00| seen|...

CVE-2024-2240

creationtimestamp| type| source ---|---|--- 2025-02-14 04:58:35+00:00| seen| https://infosec.exchange/users/cve/statuses/114000469367978113 2025-02-14 05:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4h3r3ycx2z 2025-02-14 07:09:53+00:00| seen|...

CVE-2024-36384

Pointsharp Cryptshare Server before 7.0.0 has an XSS issue that is related to notification messages...

CVE-2025-23406

creationtimestamp| type| source ---|---|--- 2025-02-14 04:31:10+00:00| seen| https://infosec.exchange/users/cve/statuses/114000361569487992 2025-02-14 05:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4h3tsxy224 2025-02-14 07:09:49+00:00| seen|...

WordPress plugin Push Notification for Post and BuddyPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-7541

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for this issue Description A memory corruption issue exists due to incorrect handling of control transfer buffer sizes in the usb: cdc-acm module. When the first fragment is...

CVE-2025-22961

creationtimestamp| type| source ---|---|--- 2025-02-13 23:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3szbkmug2x 2025-02-14 00:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li3xgczwtg24 2025-02-14 01:09:50+00:00|...

CVE-2025-25195

Zulip is an open source team chat application. A weekly cron job added in 50256f48314250978f521ef439cafa704e056539 demotes channels to being "inactive" after they have not received traffic for 180 days. However, upon doing so, an event was sent to all users in the organization, not just users in...

CVE-2025-23421

creationtimestamp| type| source ---|---|--- 2025-02-13 21:53:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113998796653284268 2025-02-13 22:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3pnktrth2s 2025-02-13 23:11:41+00:00| seen|...

CVE-2025-25195 Zulip events can leak private channel names

Zulip is an open source team chat application. A weekly cron job added in 50256f48314250978f521ef439cafa704e056539 demotes channels to being "inactive" after they have not received traffic for 180 days. However, upon doing so, an event was sent to all users in the organization, not just users in...

CVE-2025-24889

creationtimestamp| type| source ---|---|--- 2025-02-13 17:37:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113997790534218207 2025-02-13 18:18:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3cfi2hv32c 2025-02-13 19:10:04+00:00|...