CVE-2025-2276

creationtimestamp| type| source ---|---|--- 2025-03-26 00:25:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8790 2025-03-26 01:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llalqwqoyp2l 2025-03-26 03:51:26+00:00| seen| https://t.me/cvedetector/21...

CVE-2024-47109

creationtimestamp| type| source ---|---|--- 2025-03-10 16:38:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7012 2025-03-10 19:02:31+00:00| seen| https://t.me/cvedetector/19966 2025-03-10 19:45:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2cw24ikh2f...

CVE-2025-26205

creationtimestamp| type| source ---|---|--- 2025-03-10 01:20:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljyf62q7gj2f 2025-03-10 14:45:04+00:00| seen| Telegram/8rlFv4dW7eV6CiBCgL1hly0M33il3PK0LKeMNYw93DznVvyI...

CVE-2024-13825

creationtimestamp| type| source ---|---|--- 2025-03-08 06:35:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6924 2025-03-08 09:20:07+00:00| seen| https://t.me/cvedetector/19884 2025-03-08 10:30:18+00:00| seen|...

CVE-2025-1540

creationtimestamp| type| source ---|---|--- 2025-03-06 09:37:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6659 2025-03-06 09:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljp77japzm2o 2025-03-06 11:20:04+00:00| seen|...

CVE-2024-2396

creationtimestamp| type| source ---|---|--- 2025-02-11 02:18:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulsdjdga22...

CVE-2023-1266

creationtimestamp| type| source ---|---|--- 2025-02-11 02:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulo2r5eq27...

CVE-2025-24635

creationtimestamp| type| source ---|---|--- 2025-01-31 09:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzo2ymwch2c 2025-01-31 10:15:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3623 2025-01-31 11:11:31+00:00| seen| https://t.me/cvedetector/16907...

CVE-2025-24784

creationtimestamp| type| source ---|---|--- 2025-01-30 16:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxuz5cfmi27 2025-01-30 18:26:52+00:00| seen| https://t.me/cvedetector/16791...

CVE-2025-0484

creationtimestamp| type| source ---|---|--- 2025-01-15 20:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfslgssef22c 2025-01-15 20:54:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1855 2025-01-15 21:49:32+00:00| seen|...

CVE-2024-23399

creationtimestamp| type| source ---|---|--- 2025-01-01 00:17:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbwcylbm2i...

openSUSE Security Advisory (SUSE-SU-2024:4050-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

CVE-2023-4935

The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the createprofile function. This makes it possible for unauthenticated attackers to create profiles via a forged request granted th...

The vulnerability of the command-line interface of the Network Manager program, which is used to manage network connections, allows a attacker to gain access to confidential data.

The vulnerability of the nmcli command-line interface for managing network connections involves incorrect settings during the creation of a new profile. Exploiting this vulnerability allows an attacker to gain access to confidential data...

LinkedIn Adds Verified Emails, Profile Creation Dates

Responding to a recent surge in AI-generated bot accounts, LinkedIn is rolling out new features that it hopes will help users make more informed decisions about with whom they choose to connect. Many LinkedIn profiles now display a creation date, and the company is expanding its domain validation...

CVE-2021-25048

The KingComposer WordPress plugin through 2.9.6 does not have authorisation, CSRF and sanitisation/escaping when creating profile, allowing any authenticated users to create arbitrary ones, with Cross-Site Scripting payloads in them...

Cross site scripting

The KingComposer WordPress plugin through 2.9.6 does not have authorisation, CSRF and sanitisation/escaping when creating profile, allowing any authenticated users to create arbitrary ones, with Cross-Site Scripting payloads in them...

KingComposer <= 2.9.6 - Subscriber+ Stored Cross-Site Scripting

The plugin does not have authorisation, CSRF and sanitisation/escaping when creating profile, allowing any authenticated users to create arbitrary ones, with Cross-Site Scripting payloads in them Create profile: fetch"https://example.com/wp-admin/admin-ajax.php?action=kccreateprofile", "headers":...

Profile creation can be frontrun

Lines of code Vulnerability details Impact The LensHub/PublishingLogic.createProfile function can be frontrun by other whitelisted profile creators. An attacker can observe pending createProfile transactions and frontrun them, own that handle, and demand ransom from the original transaction...