CVE-2025-31140

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

CVE-2025-31140

JetBrains TeamCity before 2025.03 is vulnerable to stored cross-site scripting on the Cloud Profiles page (CVE-2025-31140). The issue allows injected scripts to be stored and rendered when the Cloud Profiles page is viewed. Affected software is JetBrains TeamCity; the root cause is stored XSS on ...

CVE-2025-31140

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

CVE-2025-31141

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2025-31141

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2025-31141

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2025-31141: Generation of Error Message Containing Sensitive Information

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2025-31140: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

PT-2025-13392

Name of the Vulnerable Software and Affected Versions hay-kot mealie version 2.2.0 Description A Broken Object Level Authorization issue exists in the "/api/users/user-id" component, allowing users to modify their own profiles and potentially grant themselves additional permissions or change thei...

CVE-2019-9875

creationtimestamp| type| source ---|---|--- 2025-03-26 18:45:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llcgyim6af2v 2025-03-26 19:05:08+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llci42bxm52u 2025-03-26 21:39:21+00:00| seen|...

PT-2025-13165

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2025.03 Description The issue concerns stored XSS that was possible on the Cloud Profiles page. This means an attacker could inject malicious code into the page, which would then be executed by the browser ...

CVE-2025-30216

creationtimestamp| type| source ---|---|--- 2025-03-25 20:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lla4xenrw42v 2025-03-25 21:05:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dgqizm26 2025-03-25 23:40:54+00:00| seen|...

CVE-2024-48818

creationtimestamp| type| source ---|---|--- 2025-03-25 20:24:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8764 2025-03-25 21:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dgnb4a2s 2025-03-25 23:40:52+00:00| seen|...

CVE-2025-28904

creationtimestamp| type| source ---|---|--- 2025-03-25 19:24:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8737 2025-03-25 19:40:23+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ll7zm6auuv2u 2025-03-25 21:05:03+00:00| seen|...

CVE-2024-58104

creationtimestamp| type| source ---|---|--- 2025-03-25 18:37:22+00:00| seen| https://bsky.app/profile/potato.software/post/3ll7w3iarlo2w 2025-03-25 21:05:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lla6dh63lu26 2025-03-25 22:00:07+00:00| seen| https://t.me/cvedetector/21115...

CVE-2025-30091

creationtimestamp| type| source ---|---|--- 2025-03-25 14:40:25+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ll7itrokhg2o 2025-03-25 15:30:24+00:00| seen| Telegram/fkOkNKNAko3WqC0p1YCGx1teUW4Z2azOsTEPi7YkRkOXCo 2025-03-25 16:59:45+00:00| seen|...

CVE-2025-26512

creationtimestamp| type| source ---|---|--- 2025-03-24 22:23:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8562 2025-03-24 22:48:14+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114219843195697793 2025-03-24 23:40:25+00:00| seen|...

CVE-2024-53678

creationtimestamp| type| source ---|---|--- 2025-03-24 18:00:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ll5dlh3oqr2k 2025-03-25 10:24:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8638 2025-03-25 10:54:29+00:00| seen|...

CVE-2025-1974

creationtimestamp| type| source ---|---|--- 2025-03-24 17:55:00+00:00| seen| https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html 2025-03-24 21:44:21+00:00| seen| https://bsky.app/profile/lookitup.baby/post/3ll5q2vbz6c2k 2025-03-24 21:58:30+00:00| seen|...

CVE-2025-2644

creationtimestamp| type| source ---|---|--- 2025-03-23 09:20:08+00:00| seen| https://bsky.app/profile/potato.software/post/3lkzvz7ue5p26 2025-03-23 10:30:20+00:00| published-proof-of-concept| Telegram/nm6qIjtwrZkjzniqYVM6DsgwdeUk9hVrRjiRKRHyvABWRl4 2025-03-23 11:28:09+00:00| seen|...