CVE-2025-24710

creationtimestamp| type| source ---|---|--- 2025-01-31 09:17:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzo35nphx27 2025-01-31 10:15:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3637 2025-01-31 11:11:33+00:00| seen|...

CERTFR-2020-ALE-007

creationtimestamp| type| source ---|---|--- 2025-01-29 16:33:04+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfikue6s2d...

CVE-2025-24374

creationtimestamp| type| source ---|---|--- 2025-01-29 07:00:56+00:00| seen| https://bsky.app/profile/symfony.com/post/3lgufjj5oh52a 2025-01-29 08:19:01+00:00| seen| https://bsky.app/profile/druid.fi/post/3lgujv2zyt22r 2025-01-29 15:30:44+00:00| seen|...

CVE-2024-54478

creationtimestamp| type| source ---|---|--- 2025-01-27 22:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxplwxia2i...

CVE-2025-21509

creationtimestamp| type| source ---|---|--- 2025-01-21 21:17:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrn6cldo2f...

CVE-2024-55923

creationtimestamp| type| source ---|---|--- 2025-01-14 20:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xtl63c2c 2025-01-14 22:22:50+00:00| seen| https://t.me/cvedetector/15358 2025-01-15 15:10:27+00:00| published-proof-of-concept|...

CVE-2025-23072

creationtimestamp| type| source ---|---|--- 2025-01-14 19:16:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpxnpqzrk2t 2025-01-14 20:42:04+00:00| seen| https://t.me/cvedetector/15331...

CVE-2023-42230

creationtimestamp| type| source ---|---|--- 2025-01-13 22:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnr6jdzdg2r...

CVE-2024-13269

creationtimestamp| type| source ---|---|--- 2025-01-09 20:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinevjge2m 2025-01-30 23:19:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3524 2025-01-31 01:12:14+00:00| seen|...

CVE-2025-22813

creationtimestamp| type| source ---|---|--- 2025-01-09 16:18:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd3dndymc2e 2025-01-09 17:46:08+00:00| seen| https://t.me/cvedetector/14866 2025-01-10 21:04:20+00:00| published-proof-of-concept|...

CVE-2024-23427

creationtimestamp| type| source ---|---|--- 2025-01-01 00:18:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbyhdqey25...

CVE-2024-45256

creationtimestamp| type| source ---|---|--- 2024-08-26 09:31:40+00:00| seen| https://t.me/cvedetector/4103 2024-10-15 15:35:55+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/byobunauthrce.rb 2025-02-06 03:13:46+00:00| seen|...

Default configuration

A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verifyemailenabled" will only validate email only on sign up...

CVE-2024-22307

creationtimestamp| type| source ---|---|--- 2024-01-31 18:22:18+00:00| seen| https://t.me/ctinow/176960 2024-02-22 17:52:34+00:00| seen| https://t.me/ctinow/190978 2025-02-19 21:02:40+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodrdpyg25...

CVE-2023-4284

creationtimestamp| type| source ---|---|--- 2023-09-04 16:16:40+00:00| seen| https://t.me/cibsecurity/69793 2025-03-19 21:02:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lkr3emgrld2s...

PT-2023-22202 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions prior to 14.8RC1 Description: The HTML macro in XWiki does not properly neutralize script-related HTML tags, allowing any user who can use the HTML macro to introduce an XSS attack. This is particularly dangerous in a standard...

CVE-2023-26602

creationtimestamp| type| source ---|---|--- 2023-02-26 22:26:08+00:00| seen| https://t.me/cibsecurity/58914 2024-01-16 13:05:23+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9792 2024-08-16 09:09:02+00:00| published-proof-of-concept| https://t.me/Rootsec2/2612 2025-04-...

OctoberCMS Cross-Site Scripting

Cross-Site Scripting exists in OctoberCMS 1.0.425 aka Build 425, allowing a least privileged user to upload an SVG file containing malicious code as the Avatar for the profile. When this is opened by the Admin, it causes JavaScript execution in the context of the Admin account...

JobCareer < 3.5 - Multiple Cross-Site Scripting (XSS)

An Unauthenticated Reflected & Authenticated Persistent XSS vulnerabilities were discovered in the JobCareer theme through 3.4 for WordPress. Unauthenticated Reflected XSS - Vulnerable parameters: jobtitle, specialisms, location Authenticated Persistent XSS on Employer Profile - «Complete Address...

Moxa NPort W2x50A Operating System Command Injection Vulnerability

Moxa NPort W2x50A is a Moxa serial communication server for connecting industrial serial devices to a network. An operating system command injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware prior to version 2.2 Build18082311. An attacker can...