britcham.org.sg Open Redirect vulnerability OBB-4027452

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress SVG Support plugin <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin SVG Support versions = 2.5.10...

PT-2025-7579 · Itsourcecode · Itsourcecode Simple Chatbox

Name of the Vulnerable Software and Affected Versions: ITSourcecode Simple ChatBox versions up to 1.0 Description: A vulnerability was found in ITSourcecode Simple ChatBox, affecting unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data. Recommendations:...

PT-2025-7455 · Unknown · Wyn Enterprise

Name of the Vulnerable Software and Affected Versions: Wyn Enterprise versions prior to 8.0.00204.0 Description: The report generation functionality in Wyn Enterprise allows for code inclusion but does not sufficiently limit what code might be included. An attacker can use a low-privileges accoun...

Wyn Enterprise 安全漏洞

Wyn Enterprise is an embedded business intelligence and analytics tool from Wyn Enterprise, Inc. A security vulnerability exists in Wyn Enterprise prior to version 8.0.00204.0, which stems from a report generation feature that allows code to be included, but does not adequately restrict the code...

WordPress igumbi Online Booking plugin <= 1.40 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin igumbi Online Booking versions = 1.40...

CVE-2024-7131

creationtimestamp| type| source ---|---|--- 2025-02-20 23:17:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4838 2025-02-21 01:01:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3linm6med622p...

CVE-2025-25676

creationtimestamp| type| source ---|---|--- 2025-02-20 23:17:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4833 2025-02-21 00:55:49+00:00| seen| https://t.me/cvedetector/18613 2025-02-21 19:48:45+00:00| seen|...

GHSA-RR6P-3PFG-562J XWiki Platform allows remote code execution as guest via SolrSearchMacros request

Impact Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduce on an instance, without being logged in, go to...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the Unselectable function. An attacker can obtain sensitive information by exploiting the function's improper handling of data visibility. Remediation There is no fixed version for AutoQueryable.Core. References...

CVE-2024-12284

creationtimestamp| type| source ---|---|--- 2025-02-20 02:16:30+00:00| seen| https://t.me/cvedetector/18487 2025-02-20 02:33:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lilatp35kb2m 2025-02-20 03:36:00+00:00| seen|...

CVE-2024-29125

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:54+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodtii3522...

CVE-2024-27993

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:50+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodsvnz32f...

CVE-2024-53974

creationtimestamp| type| source ---|---|--- 2025-02-19 20:24:51+00:00| seen| https://t.me/cvedetector/18452 2025-02-19 22:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrwss7v72c...

CVE-2025-1118

creationtimestamp| type| source ---|---|--- 2025-02-19 20:24:49+00:00| seen| https://t.me/cvedetector/18449 2025-02-19 22:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrwt4v6o24 2025-02-27 15:29:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5694 2025-05-16...

CVE-2025-1465

creationtimestamp| type| source ---|---|--- 2025-02-19 18:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likej7nyny2c 2025-02-19 20:25:10+00:00| seen| https://t.me/cvedetector/18463...

CVE-2023-47160

creationtimestamp| type| source ---|---|--- 2025-02-19 18:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likej7rgb42y 2025-02-19 19:48:49+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114032281394614424 2025-02-19 20:25:04+00:00| seen|...

CVE-2024-13364

creationtimestamp| type| source ---|---|--- 2025-02-19 09:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijgtptino2o 2025-02-19 12:03:06+00:00| seen| https://t.me/cvedetector/18422 2025-02-19 15:39:58+00:00| seen|...

CVE-2024-57257

creationtimestamp| type| source ---|---|--- 2025-02-18 23:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liifegmv4r2t 2025-02-19 01:11:12+00:00| seen| https://t.me/cvedetector/18393 2025-02-19 03:09:25+00:00| seen|...

CVE-2024-57254

creationtimestamp| type| source ---|---|--- 2025-02-18 23:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liife7e7sr2t 2025-02-19 01:11:05+00:00| seen| https://t.me/cvedetector/18387...