Malicious code in webxr-input-profiles (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6325 Malicious code in webxr-input-profiles (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-54090

creationtimestamp| type| source ---|---|--- 2025-07-23 19:23:32+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lunqmetiv225 2025-07-24 00:10:05+00:00| seen| https://bsky.app/profile/lobsters-feed.bsky.social/post/3luoamu363o2j 2025-07-24 05:30:09+00:00| seen|...

CVE-2025-54296

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-54296 Extension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-54296

A stored Cross‑Site Scripting (XSS) vulnerability exists in the ProFiles component for Joomla, affecting versions 1.0 through 1.5.0. The issue is described in multiple sources (notably PT-2025-30569 and CVE records) as allowing injection/storage of scripts within the application. The connected do...

CVE-2025-54296 Extension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-54296: Improper Neutralization of Input During Web Page Generation

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-49876: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows SQL Injection.This issue affects ProfileGrid : from n/a through = 5.9.5.2...

CVE-2025-6977: Improper Neutralization of Input During Web Page Generation

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘pmgetmessengernotification’ function in all versions up to, and including, 5.9.5.4 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2025-24006

creationtimestamp| type| source ---|---|--- 2025-07-08 07:08:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816354360150951 2025-07-08 07:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgql3inq6b2...

CVE-2025-53109

creationtimestamp| type| source ---|---|--- 2025-07-02 16:56:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyolnrp7y2m 2025-07-02 17:43:18+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lsyr7wntms26 2025-07-02 18:24:31+00:00| seen|...

CVE-2025-6463

creationtimestamp| type| source ---|---|--- 2025-07-02 08:22:13+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lsxrqhqvcku2 2025-07-02 09:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxwphgtsn2s 2025-07-02 11:41:26+00:0...

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...

CVE-2024-8419

creationtimestamp| type| source ---|---|--- 2025-06-30 10:07:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19919 2025-06-30 10:29:36+00:00| seen| https://infosec.exchange/users/certvde/statuses/114771845197214791 2025-06-30 10:29:43+00:00| seen|...

CVE-2025-6425

An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12,...

CVE-2025-3090

creationtimestamp| type| source ---|---|--- 2025-06-24 08:15:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/114737343640310100 2025-06-24 08:16:10+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lsdns4hibhy2 2025-06-24 08:16:20+00:00| seen|...

June 24, 2025—KB5061087 (OS Build 19045.6036) Preview

None None...

CVE-2025-38083

creationtimestamp| type| source ---|---|--- 2025-06-20 11:46:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18933 2025-07-30 17:02:49+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lv73zcnzx327 2025-07-30 17:03:19+00:00| seen|...

CVE-2025-52719: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Retrieve Embedded Sensitive Data.This issue affects ProfileGrid : from n/a through = 5.9.5.2...