3136 matches found
CVE-2025-25025
creationtimestamp| type| source ---|---|--- 2025-05-28 02:00:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq746hd4r552 2025-05-28 03:41:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7bum4yql2m...
CVE-2025-5271
creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17622 2025-05-27 13:16:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5rf525f7z2 2025-05-27 13:56:54+00:00| seen|...
CVE-2025-5148
creationtimestamp| type| source ---|---|--- 2025-05-25 12:13:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpyn2glud7c2 2025-05-25 13:36:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpyrp47ytr2w...
CVE-2025-5147
creationtimestamp| type| source ---|---|--- 2025-05-25 11:43:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpylf24ajrv2 2025-05-25 11:45:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17506 2025-05-25...
CVE-2025-5135
creationtimestamp| type| source ---|---|--- 2025-05-24 22:45:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17497 2025-05-24 23:11:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpxb7kdrdlo2 2025-05-25...
CVE-2025-4603
creationtimestamp| type| source ---|---|--- 2025-05-24 04:01:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpvb2eiandw2 2025-05-24 04:50:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17479 2025-05-24...
CVE-2024-52591
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet and HttpRequestService.getActivityJson allows an attacker to create fake user profiles and forged notes. The spoofed users will appear to be from a different instance...
CVE-2024-31870
IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in...
CVE-2024-31464
XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.19, 15.5.4, and 15.9-rc-1, it is possible to access the hash of a password by using the diff feature of the history whenever the object storing the password is deleted. Using that vulnerability it'...
CVE-2024-49273
Missing Authorization vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities.This issue affects ProfileGrid : from n/a through = 5.9.3...
CVE-2024-12037
The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions UGC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bfnewsubmissionlink' shortcode in all versions up to, and including, 2.8.13 due to insufficient...
CVE-2024-52590
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet allows an attacker to create fake user profiles that appear to be from a different instance than the one where they actually exist. These profiles can be used to...
CVE-2024-34674
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...
CVE-2024-49407
Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles...
CVE-2024-30616
Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin users can manipulate sensitive profiles information, posing a significant risk to data integrity...
CVE-2023-47644
Cross-Site Request Forgery CSRF vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6...
CVE-2023-26689
An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request...
CVE-2023-48746
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Reflected XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User...