CVE-2015-10032

creationtimestamp| type| source ---|---|--- 2025-04-09 19:48:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11151...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the LoadArchiveFiles function in archive.go. An attacker can disrupt service by supplying an archive whose decompressed size is very large. Remediation A fix was pushed into the...

WordPress Waymark plugin <= 1.5.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by theviper17 in WordPress Plugin Waymark versions = 1.5.3...

WordPress Lock Your Updates Plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Lock Your Updates versions = 1.1...

WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Motors versions = 1.4.71...

CVE-2022-46449

creationtimestamp| type| source ---|---|--- 2025-04-09 15:47:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11091...

CVE-2021-47323

creationtimestamp| type| source ---|---|--- 2025-04-09 13:47:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11064...

beslist.be Cross Site Scripting vulnerability OBB-4042730

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-277447

creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...

GHSA-VJ5Q-3JV2-CG5P

creationtimestamp| type| source ---|---|--- 2025-04-08 16:46:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10954...

RUSTSEC-2025-0024 crossbeam-channel: double free on Drop

The internal Channel type's Drop method has a race which could, in some circumstances, lead to a double-free. This could result in memory corruption. Quoting from the upstream description in merge request \1187: The problem lies in the fact that dicardallmessages contained two paths that could le...

WordPress Motors plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation vulnerability discovered by mikemyers in WordPress Plugin Motors versions = 1.4.64...

WordPress coreActivity: Activity Logging for WordPress plugin <= 2.7 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by Yassine NEGGAOUI in WordPress Plugin coreActivity: Activity Logging plugin for WordPress versions = 2.7...

WordPress WPFront User Role Editor plugin <= 4.2.1 - Cross-Site Request Forgery to Privilege Escalation via whitelist_options Function vulnerability

Cross-Site Request Forgery to Privilege Escalation via whitelistoptions Function vulnerability discovered by WordFence in WordPress Plugin WPFront User Role Editor versions = 4.2.1...

WordPress GreenPay plugin 3.0.0-3.0.9 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Avraham Shemesh in WordPress Plugin GreenPay versions 3.0.0-3.0.9...

WordPress Asgaros Forum plugin <= 3.0.0 - File Upload Numbers Bypass vulnerability

File Upload Numbers Bypass vulnerability discovered by 20kilograma in WordPress Plugin Asgaros Forum versions = 3.0.0...

GHSA-WFPW-HFCP-9M73

creationtimestamp| type| source ---|---|--- 2025-04-06 20:44:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10643...

GHSA-F42F-6FVV-XQX3

creationtimestamp| type| source ---|---|--- 2025-04-06 19:44:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10639 2025-04-06 22:30:35+00:00| published-proof-of-concept| Telegram/9YoJkce8ZLrbJOFjVGYj1Vi2UBwBRdx3KAe6xADJGY12VGo...

vpsmalaysia.com.my Open Redirect vulnerability OBB-4042355

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Lafka Plugin plugin <= 7.1.0 - Missing Authorization to Authenticated (Subscriber+) Theme Option Update vulnerability

Missing Authorization to Authenticated Subscriber+ Theme Option Update vulnerability discovered by István Márton in WordPress Plugin Lafka Plugin versions = 7.1.0...