CVE-2025-23902

CVE-2025-23902 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Error Notification (Taras Dashkevych). Affected versions are listed as up to 0.2.7 (scope: from n/a through 0.2.7). The Red Hat advisory confirms the same CVE and description. There are no connected...

WordPress Error Notification plugin <= 0.2.7 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Error Notification versions = 0.2.7...

WordPress Push Notification for Post and BuddyPress plugin <= 2.11 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika in WordPress Plugin Push Notification for Post and BuddyPress versions = 2.11...

CVE-2025-20621

creationtimestamp| type| source ---|---|--- 2025-01-16 18:22:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113839423405863947 2025-01-16 19:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuykinzt62f 2025-01-16 19:44:18+00:00| seen|...

CVE-2024-57769

creationtimestamp| type| source ---|---|--- 2025-01-16 17:37:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113839246685053852 2025-01-16 17:55:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1994 2025-01-16 18:15:52+00:00| seen|...

CVE-2024-57159

creationtimestamp| type| source ---|---|--- 2025-01-16 16:15:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113838924920738866 2025-01-16 16:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuohvgkek2s 2025-01-16 16:19:23+00:00| seen|...

CVE-2025-23200

creationtimestamp| type| source ---|---|--- 2025-01-16 15:17:20+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-c66p-64fj-jmc2 2025-01-16 22:56:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2074 2025-01-16...

CVE-2025-23199

creationtimestamp| type| source ---|---|--- 2025-01-16 15:13:09+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-27vf-3g4f-6jp7 2025-01-16 22:56:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2071 2025-01-16...

Avery had credit card skimmer stuck on its site for months

The consequences of a wave of credit card skimmers—which is normal around the holidays—are starting to show. Label maker Avery has filed a data breach notification, saying 61,193 people may have had their credit card details stolen. On December 9, Avery said it became aware of an attack on its...

BELL-CVE-2024-57899

Bulletin has no description...

CVE-2024-10789

creationtimestamp| type| source ---|---|--- 2025-01-16 03:28:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113835909092626607 2025-01-16 03:55:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1912 2025-01-16 04:15:31+00:00| seen|...

WordPress plugin Error Notification 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2025-0491

creationtimestamp| type| source ---|---|--- 2025-01-15 22:08:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113834648485232457 2025-01-15 22:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfss4p4zuo2t 2025-01-15 22:55:21+00:00|...

CVE-2025-0488

creationtimestamp| type| source ---|---|--- 2025-01-15 21:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsorefd5q2n 2025-01-15 22:39:57+00:00| seen| https://t.me/cvedetector/15527...

CVE-2024-48126

creationtimestamp| type| source ---|---|--- 2025-01-15 21:12:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113834430579140280 2025-01-15 21:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsor52ild2j 2025-01-15 21:38:21+00:00| seen|...

CVE-2025-0485

creationtimestamp| type| source ---|---|--- 2025-01-15 20:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfslgvulmf2s 2025-01-15 20:55:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1862 2025-01-15 21:49:48+00:00| seen|...

CVE-2025-0484

creationtimestamp| type| source ---|---|--- 2025-01-15 20:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfslgssef22c 2025-01-15 20:54:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1855 2025-01-15 21:49:32+00:00| seen|...

CVE-2024-40839

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to view notification contents from the Lock Screen...

CVE-2024-40839

CVE-2024-40839 affects Apple iOS and iPadOS (Lock Screen). Reported issue arises from improper/insufficient state management that could allow a local attacker with physical access to view notification contents on the lock screen. The vulnerability is fixed in iOS 17.5 and iPadOS 17.5. Connected s...

CVE-2024-40839

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to view notification contents from the Lock Screen...