3586 matches found
CVE-2025-2620
creationtimestamp| type| source ---|---|--- 2025-03-22 15:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lky2s5a6fy2v 2025-03-22 16:00:37+00:00| seen| Telegram/yI8ddaBBZUFrz-0VzdopTdwt32Plsy-4m3Oi8ASzTzdUwoY 2025-03-22 16:48:31+00:00| seen|...
CVE-2025-1408
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdeclinejoingrouprequest and pmapprovejoingrouprequest functions in all versions up to, and including, 5.9.4.4. This makes it...
PT-2025-12465
Name of the Vulnerable Software and Affected Versions The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to, and including, 5.9.4.4 Description The issue is related to unauthorized modification of data due to a missing capability check on the pm decline join...
PT-2025-12463
Name of the Vulnerable Software and Affected Versions The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to, and including, 5.9.4.7 Description The issue is related to blind and time-based SQL Injections via the rid and search parameters due to insufficient...
CVE-2025-0723: Improper Neutralization of Special Elements used in an SQL Command
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind and time-based SQL Injections via the rid and search parameters in all versions up to, and including, 5.9.4.7 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2025-1408: Missing Authorization
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdeclinejoingrouprequest and pmapprovejoingrouprequest functions in all versions up to, and including, 5.9.4.4. This makes it...
CVE-2025-0724: Deserialization of Untrusted Data
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.9.4.5 via deserialization of untrusted input in the getusermetafieldshtml function. This makes it possible for authenticated attackers, with...
PT-2025-12464
Name of the Vulnerable Software and Affected Versions ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to, and including, 5.9.4.5 Description The vulnerability is related to PHP Object Injection via deserialization of untrusted input in the get user meta fields...
CVE-2025-29807
creationtimestamp| type| source ---|---|--- 2025-03-21 02:48:17+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114198137851141313 2025-03-21 02:55:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114198165753912326 2025-03-21 03:14:25+00:00| seen|...
CVE-2025-30334
creationtimestamp| type| source ---|---|--- 2025-03-20 21:16:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114196834383227856 2025-03-20 22:18:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8304 2025-03-20 22:30:49+00:00| seen|...
CVE-2024-7598
creationtimestamp| type| source ---|---|--- 2025-03-20 17:18:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8238 2025-03-20 19:09:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lktfkgalqy2j 2025-03-20 19:54:37+00:00| seen|...
CVE-2024-54471
creationtimestamp| type| source ---|---|--- 2025-03-20 15:38:16+00:00| seen| https://bsky.app/profile/wts.dev/post/3lkszql3xpc2b 2025-03-20 17:07:57+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3lkt6qxszvi2x 2025-03-20 17:08:05+00:00| seen|...
CVE-2024-23943
creationtimestamp| type| source ---|---|--- 2025-03-18 11:48:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114183275961019139 2025-03-18 12:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lknoukaeuq2s 2025-03-18 13:33:33+00:00| seen|...
Malicious code in axonify (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 22991c04631c7553b040a72573bc7d0ad80886ab6bc834ac43f1e1611f85ea02 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...
MAL-2025-191688 Malicious code in axonify (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 22991c04631c7553b040a72573bc7d0ad80886ab6bc834ac43f1e1611f85ea02 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...
power-profiles-daemon bug fix and enhancement update
An update is available for power-profiles-daemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...
CVE-2025-1734
creationtimestamp| type| source ---|---|--- 2025-03-14 06:25:41+00:00| seen| https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27 2025-03-14 18:23:04+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pvarj26 2025-03-17 12:32:28+00:00| seen|...
The vulnerability of the Profiles component in the Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the Profiles component in Google Chrome browser relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code using a specially created HTML page...
Samsung Notes Access Control Error Vulnerability
Samsung Notes is an application from the South Korean company Samsung SAMSUNG. An access control error vulnerability exists in Samsung Notes that stems from improper access control and can be exploited by an attacker to access data in multiple user profiles...
CVE-2025-25292
creationtimestamp| type| source ---|---|--- 2025-03-12 20:07:18+00:00| seen| https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/ 2025-03-12 21:40:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7388 2025-03-13...