CERTFR-2025-ACT-035

creationtimestamp| type| source ---|---|--- 2025-08-25 12:36:51+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lx7zbob7aa2m 2025-08-25 12:36:52+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115089434859724827 2025-08-25 14:37:20+00:00| seen|...

CVE-2025-7426

creationtimestamp| type| source ---|---|--- 2025-08-25 10:09:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx7qznwgqw27 2025-08-25 10:31:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lx7sbqivtx2u 2025-08-25 13:36:17+00:00| seen|...

CVE-2025-9363

creationtimestamp| type| source ---|---|--- 2025-08-23 16:29:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx3fd7adur2p 2025-08-24 06:01:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lx4spxku7o22...

Linux Distros Unpatched Vulnerability : CVE-2024-1451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lea...

CVE-2025-55299

creationtimestamp| type| source ---|---|--- 2025-08-18 20:23:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwpa3jvqke2c 2025-08-19 04:31:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwq3ejegsd24...

CVE-2025-31715

creationtimestamp| type| source ---|---|--- 2025-08-18 01:31:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwnatmxetl2a 2025-08-18 04:08:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwnjloo6aq2g 2025-08-18 09:00:54+00:00| seen|...

CVE-2025-8896: Improper Neutralization of Input During Web Page Generation

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdprcommunicationpreferences' parameter in all versions up to, and including, 3.14.3 due to insufficient input sanitization and...

CVE-2025-49033: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid : from n/a through = 5.9.5.3...

CVE-2025-8876

creationtimestamp| type| source ---|---|--- 2025-08-13 20:00:13+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lwcmhgysnr2h 2025-08-13 22:36:57+00:00| seen| https://bsky.app/profile/ytroncal.bsky.social/post/3lwcv7lyc622v 2025-08-14 04:02:32+00:00| seen|...

CVE-2025-55149

creationtimestamp| type| source ---|---|--- 2025-08-08 21:43:28+00:00| published-proof-of-concept| https://github.com/ulab-uiuc/tiny-scientist/security/advisories/GHSA-rrgf-hcr9-jq6h 2025-08-09 02:53:58+00:00| seen|...

CVE-2025-8088

creationtimestamp| type| source ---|---|--- 2025-08-08 12:40:21+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lvvbkbr7ur23 2025-08-08 14:01:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvvg36hllc2s 2025-08-08 20:58:55+00:00| seen|...

CVE-2025-29866

creationtimestamp| type| source ---|---|--- 2025-08-07 09:00:56+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvsesylx2p27 2025-08-07 09:35:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvsgqfo6ve2c...

CVE-2022-50031

creationtimestamp| type| source ---|---|--- 2025-08-07 02:11:21+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lvrnwmnqqo2v 2025-08-07 02:13:24+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lvrnwriorv42...

CVE-2025-48530

creationtimestamp| type| source ---|---|--- 2025-08-05 10:46:42+00:00| seen| https://t.me/UzbeHackers/2537 2025-08-05 15:17:56+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lvnyswpjs3k2 2025-08-05 15:40:46+00:00| seen|...

Simulating Cyberattacks through a Breach Attack Simulation (BAS) Platform Empowered by Security Chaos Engineering (SCE)

In today digital landscape, organizations face constantly evolving cyber threats, making it essential to discover slippery attack vectors through novel techniques like Security Chaos Engineering SCE, which allows teams to test defenses and identify vulnerabilities effectively. This paper proposes...

PhishParrot: LLM-Driven Adaptive Crawling to Unveil Cloaked Phishing Sites

Phishing attacks continue to evolve, with cloaking techniques posing a significant challenge to detection efforts. Cloaking allows attackers to display phishing sites only to specific users while presenting legitimate pages to security crawlers, rendering traditional detection systems ineffective...

CVE-2025-51503

A Stored Cross-Site Scripting XSS vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript execution in admin browsers...

CVE-2025-51503

A Stored Cross-Site Scripting XSS vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript execution in admin browsers...

CVE-2025-50849

CS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference IDOR. The user profile functionality allows enabling or disabling stickers through a parameter companyid sent in the request. However, this operation is not properly validated on the server side. An authenticated user can manipulate...

CVE-2025-51503

A Stored Cross-Site Scripting XSS vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript execution in admin browsers...