CVE-2025-31141: Generation of Error Message Containing Sensitive Information

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2019-9875

creationtimestamp| type| source ---|---|--- 2025-03-26 18:45:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llcgyim6af2v 2025-03-26 19:05:08+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llci42bxm52u 2025-03-26 21:39:21+00:00| seen|...

PT-2025-13165

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2025.03 Description The issue concerns stored XSS that was possible on the Cloud Profiles page. This means an attacker could inject malicious code into the page, which would then be executed by the browser ...

CVE-2025-30216

creationtimestamp| type| source ---|---|--- 2025-03-25 20:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lla4xenrw42v 2025-03-25 21:05:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dgqizm26 2025-03-25 23:40:54+00:00| seen|...

CVE-2024-48818

creationtimestamp| type| source ---|---|--- 2025-03-25 20:24:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8764 2025-03-25 21:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dgnb4a2s 2025-03-25 23:40:52+00:00| seen|...

CVE-2025-28904

creationtimestamp| type| source ---|---|--- 2025-03-25 19:24:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8737 2025-03-25 19:40:23+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ll7zm6auuv2u 2025-03-25 21:05:03+00:00| seen|...

CVE-2024-58104

creationtimestamp| type| source ---|---|--- 2025-03-25 18:37:22+00:00| seen| https://bsky.app/profile/potato.software/post/3ll7w3iarlo2w 2025-03-25 21:05:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dh63lu26 2025-03-25 22:00:07+00:00| seen| https://t.me/cvedetector/21115...

CVE-2025-30091

creationtimestamp| type| source ---|---|--- 2025-03-25 14:40:25+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ll7itrokhg2o 2025-03-25 15:30:24+00:00| seen| Telegram/fkOkNKNAko3WqC0p1YCGx1teUW4Z2azOsTEPi7YkRkOXCo 2025-03-25 16:59:45+00:00| seen|...

CVE-2025-26512

creationtimestamp| type| source ---|---|--- 2025-03-24 22:23:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8562 2025-03-24 22:48:14+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114219843195697793 2025-03-24 23:40:25+00:00| seen|...

CVE-2024-53678

creationtimestamp| type| source ---|---|--- 2025-03-24 18:00:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll5dlh3oqr2k 2025-03-25 10:24:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8638 2025-03-25 10:54:29+00:00| seen|...

CVE-2025-1974

creationtimestamp| type| source ---|---|--- 2025-03-24 17:55:00+00:00| seen| https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html 2025-03-24 21:44:21+00:00| seen| https://bsky.app/profile/lookitup.baby/post/3ll5q2vbz6c2k 2025-03-24 21:58:30+00:00| seen|...

CVE-2025-2644

creationtimestamp| type| source ---|---|--- 2025-03-23 09:20:08+00:00| seen| https://bsky.app/profile/potato.software/post/3lkzvz7ue5p26 2025-03-23 10:30:20+00:00| published-proof-of-concept| Telegram/nm6qIjtwrZkjzniqYVM6DsgwdeUk9hVrRjiRKRHyvABWRl4 2025-03-23 11:28:09+00:00| seen|...

CVE-2025-2620

creationtimestamp| type| source ---|---|--- 2025-03-22 15:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lky2s5a6fy2v 2025-03-22 16:00:37+00:00| seen| Telegram/yI8ddaBBZUFrz-0VzdopTdwt32Plsy-4m3Oi8ASzTzdUwoY 2025-03-22 16:48:31+00:00| seen|...

CVE-2025-1408

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdeclinejoingrouprequest and pmapprovejoingrouprequest functions in all versions up to, and including, 5.9.4.4. This makes it...

CVE-2025-1408: Missing Authorization

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdeclinejoingrouprequest and pmapprovejoingrouprequest functions in all versions up to, and including, 5.9.4.4. This makes it...

CVE-2025-0723: Improper Neutralization of Special Elements used in an SQL Command

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind and time-based SQL Injections via the rid and search parameters in all versions up to, and including, 5.9.4.7 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2025-0724: Deserialization of Untrusted Data

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.9.4.5 via deserialization of untrusted input in the getusermetafieldshtml function. This makes it possible for authenticated attackers, with...

CVE-2025-29807

creationtimestamp| type| source ---|---|--- 2025-03-21 02:48:17+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114198137851141313 2025-03-21 02:55:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114198165753912326 2025-03-21 03:14:25+00:00| seen|...

CVE-2025-30334

creationtimestamp| type| source ---|---|--- 2025-03-20 21:16:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114196834383227856 2025-03-20 22:18:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8304 2025-03-20 22:30:49+00:00| seen|...

CVE-2024-7598

creationtimestamp| type| source ---|---|--- 2025-03-20 17:18:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8238 2025-03-20 19:09:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lktfkgalqy2j 2025-03-20 19:54:37+00:00| seen|...