Researcher Wipes White Supremacist Dating Sites, Leaks Data on okstupid.lol

Security researcher in "Martha Root" in Pink Power Ranger deletes white supremacist dating sites live onstage, leaks 8,000 profiles and 100GB of data at Chaos Communication Congress CCC 2025...

CVE-2025-15428

creationtimestamp| type| source ---|---|--- 2026-01-02 06:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbg7qiihyt2p 2026-01-02 07:43:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbgfjlltmq2e 2026-01-02 18:53:57+00:00| seen|...

PT-2026-24133

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software used for editing and manipulating digital images. A heap overflow can occur when encoding a PNG image due to an extremely large...

CVE-2025-30628

creationtimestamp| type| source ---|---|--- 2025-12-31 20:56:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcqvtpyen2y 2025-12-31 21:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbcr4nd4cw2u 2026-01-02 08:03:39+00:00| seen|...

CVE-2025-28949

creationtimestamp| type| source ---|---|--- 2025-12-31 20:41:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcq2fxgqe2c 2025-12-31 21:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbcr4ftxxw2u 2026-01-02 08:04:25+00:00| seen|...

CVE-2025-15358

creationtimestamp| type| source ---|---|--- 2025-12-30 09:48:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb732xj5dg2e 2025-12-30 10:45:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb76c2pieq2q 2026-01-06 22:03:31+00:00| seen|...

CVE-2025-68920

creationtimestamp| type| source ---|---|--- 2025-12-24 22:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3marcovotch2r 2025-12-24 22:34:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mard45ok7h27...

CVE-2018-25148

creationtimestamp| type| source ---|---|--- 2025-12-24 21:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar6hrwhbi2m 2025-12-24 21:48:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3marakbvwng27...

CVE-2021-47721

creationtimestamp| type| source ---|---|--- 2025-12-23 21:12:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maonzqnfgc2p 2025-12-23 21:16:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maoobg5aja2c...

CVE-2023-53982

creationtimestamp| type| source ---|---|--- 2025-12-23 20:45:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maomjikrto2f 2025-12-23 21:31:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maop4bgoai2g...

CVE-2025-29229

creationtimestamp| type| source ---|---|--- 2025-12-23 18:28:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maoeurwrq22y 2025-12-23 19:05:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maogwatm7u2u...

PT-2025-52548

Name of the Vulnerable Software and Affected Versions Ultimate Member plugin for WordPress versions prior to 2.11.1 Description The Ultimate Member plugin for WordPress is affected by a sensitive information exposure issue. Insufficient authorization checks on an unauthenticated AJAX endpoint,...

CVE-2025-14733

creationtimestamp| type| source ---|---|--- 2025-12-19 01:35:52+00:00| seen| https://infosec.exchange/users/offseq/statuses/115743663755552892 2025-12-19 01:35:53+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mackgko76e2g 2025-12-19 08:02:37+00:00| exploited|...

CVE-2025-68435

creationtimestamp| type| source ---|---|--- 2025-12-18 00:05:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/115737646820820278 2025-12-18 00:05:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ma7uweooql2f 2025-12-18 01:44:31+00:00| seen|...

CVE-2023-53905 ProjectSend r1605 CSV Injection via User Account Export Functionality

ProjectSend r1605 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into user profile names. Attackers can craft payloads like =calc|a!z| in the name field to trigger code execution when administrators export action logs as CSV files...

EUVD-2025-203923

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the YouTube Video 'value' field in all versions up to, and including, 2.11.0. This is due to insufficient input...

CVE-2025-13217

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the YouTube Video 'value' field in all versions up to, and including, 2.11.0. This is due to insufficient input...

The US digital doxxing of H-1B applicants is a massive privacy misstep

Technology professionals hoping to come and work in the US face a new privacy concern. Starting December 15, skilled workers on H-1B visas and their families must flip their social media profiles to public before their consular interviews. It’s a deeply risky move from a security and privacy...

CVE-2025-66474

The CVE-2025-66474 entry concerns XWiki Rendering. Affected: XWiki Rendering versions 16.10.9 and earlier, 17.0.0-rc-1 through 17.4.2, and 17.5.0-rc-1 through 17.5.0. Root cause: insufficient protection against {{/html}} injection, enabling attackers who can edit a profile or any document to exec...

Spiderman Phishing Kit Targets European Banks with Real-Time Credential Theft

Varonis threat analysts warn about Spiderman, a dangerous new kit that automates attacks against European banks and crypto customers, stealing a victim’s full identity profile...