CVE-2024-12394

creationtimestamp| type| source ---|---|--- 2025-01-09 11:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckh75z7c22 2025-01-09 11:59:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113798282266042322 2025-01-09 12:15:20+00:00| seen|...

CVE-2023-33762

creationtimestamp| type| source ---|---|--- 2025-01-08 20:13:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/809...

CVE-2023-3031

creationtimestamp| type| source ---|---|--- 2025-01-08 18:17:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/760...

GHSA-R36M-44GG-WXG2

creationtimestamp| type| source ---|---|--- 2025-01-08 16:13:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/706...

Missing Authentication for Critical Function

Overview django-mdeditor is an A simple Django app to edit markdown text. Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint...

CVE-2023-33977

creationtimestamp| type| source ---|---|--- 2025-01-07 18:37:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/505 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14449 2026-07-30 00:00:48+00:00| seen| https://t.me/CVEhub/14449 2026-07-31 00:00:26+00:00|...

CVE-2023-0121

creationtimestamp| type| source ---|---|--- 2025-01-07 17:42:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/501...

GHSA-98PX-6486-J7QC

creationtimestamp| type| source ---|---|--- 2025-01-07 16:37:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/452...

GHSA-PPP3-73JM-5RM6

creationtimestamp| type| source ---|---|--- 2025-01-06 15:37:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/168...

GHSA-XWPP-QXQ5-Q73H

creationtimestamp| type| source ---|---|--- 2025-01-06 00:35:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/142...

GHSA-V48G-9GC6-WM57

creationtimestamp| type| source ---|---|--- 2025-01-05 18:40:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/133...

GHSA-9V62-R8M2-76M8

creationtimestamp| type| source ---|---|--- 2025-01-05 09:36:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/123...

GHSA-W2VX-FP9Q-36PH

creationtimestamp| type| source ---|---|--- 2025-01-05 09:36:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/122...

GHSA-M4RC-HJCV-QH78

creationtimestamp| type| source ---|---|--- 2025-01-05 01:39:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/109...

Citrix workspace app for Windows issues with "limit instances"

If the user clicks multiple times on a published application it will launch several instances of the application even if "Limit to one instance per user" is set on the application...

GHSA-4CX5-89VM-833X

creationtimestamp| type| source ---|---|--- 2024-11-30 06:58:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9255...

WordPress EmbedPress Plugin <= 4.1.3 is vulnerable to Cross Site Scripting (XSS)

Software EmbedPress Type Plugin Vulnerable versions = 4.1.3 Fixed in 4.1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11203 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 903c99a746e2 Credits Max Boll b0lli Required...

WordPress Kudos Donations Plugin <= 3.2.9 is vulnerable to Cross Site Scripting (XSS)

Software Kudos Donations Type Plugin Vulnerable versions = 3.2.9 Fixed in 3.3.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11684 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 27c0ae774d02 Credits vgo0 Required...

WordPress StreamWeasels YouTube Integration Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)

Software StreamWeasels YouTube Integration Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11788 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bbd6037644c5 Credits...

WordPress Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) Plugin <= 1.2.1 is vulnerable to SQL Injection

Software Internal Linking for SEO traffic & Ranking – Auto internal links 100% automatic Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-11009 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID...