269 matches found
CVE-2025-41338
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'iddenuncia' and 'iduser' in '/backend/api/buscarTestigoByIdDenunciaUsuario.php'...
CVE-2025-62479
creationtimestamp| type| source ---|---|--- 2025-10-21 21:06:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3qacyksr222...
CVE-2025-62695
creationtimestamp| type| source ---|---|--- 2025-10-21 05:17:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3olcld4g62o...
CVE-2025-11857 XX2WP Integration Tools <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
The XX2WP Integration Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mxpfb2wpdisplayembed' shortcode in all versions up to, and including, 1.9.9. This is due to the plugin not properly sanitizing user input and output of the 'postid' parameter. This makes it...
CVE-2025-10850
creationtimestamp| type| source ---|---|--- 2025-10-16 07:33:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3calj2yol2m 2025-10-16 09:38:42+00:00| seen| https://gist.github.com/Darkcrai86/a287422624b245f6aa5d6ac90d534eb1 2026-04-08 23:32:00+00:00| seen|...
EUVD-2023-0303
Malicious code in bioql PyPI...
EUVD-2024-37918
Malicious code in bioql PyPI...
CVE-2025-9073
The All in one Minifier plugin for WordPress is vulnerable to SQL Injection via the 'postid' parameter in all versions up to, and including, 3.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2025-9073 All in one Minifier <= 3.2 - Unauthenticated SQL Injection
The All in one Minifier plugin for WordPress is vulnerable to SQL Injection via the 'postid' parameter in all versions up to, and including, 3.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2025-9073
CVE-2025-9073: All in one Minifier (WordPress)
PT-2025-37140
Name of the Vulnerable Software and Affected Versions: All in one Minifier plugin for WordPress versions prior to 3.3 Description: The All in one Minifier plugin for WordPress is susceptible to SQL Injection due to insufficient escaping of the post id parameter and inadequate preparation of...
CVE-2025-54494
creationtimestamp| type| source ---|---|--- 2025-08-26 03:01:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxbjm5pxmh23 2025-08-26 06:00:33+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...
CVE-2025-9416
creationtimestamp| type| source ---|---|--- 2025-08-26 01:34:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbepwctjz2q...
CVE-2025-57760
creationtimestamp| type| source ---|---|--- 2025-08-26 00:10:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxba2cucqd2t 2026-07-02 22:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpp3te4bef2s...
CVE-2025-54487
creationtimestamp| type| source ---|---|--- 2025-08-25 16:47:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxahcliage22 2025-08-26 06:00:33+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...
CVE-2025-48303
creationtimestamp| type| source ---|---|--- 2025-08-25 12:44:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx7zp32weu2w...
CVE-2025-9395
creationtimestamp| type| source ---|---|--- 2025-08-24 22:33:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx6k5wqkph2p...
CVE-2025-9385
creationtimestamp| type| source ---|---|--- 2025-08-24 14:34:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx5pepcswk2a...