About Cross Site Scripting – Zimbra Collaboration (CVE-2024-27443) vulnerability

About Cross Site Scripting - Zimbra Collaboration CVE-2024-27443 vulnerability. Zimbra Collaboration is a collaboration software suite that includes a mail server and a web client. An attacker can send an email containing a specially crafted calendar header with an embedded payload. If the user...

CVE-2025-48996

creationtimestamp| type| source ---|---|--- 2025-06-02 20:37:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnmxvlqxrc2 2025-06-03 00:42:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqo2nkdcel2e...

CVE-2025-25179

creationtimestamp| type| source ---|---|--- 2025-06-02 06:32:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5rbjggjm2 2025-06-02 08:22:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqmdvc6wsd2k...

CVE-2025-49112

creationtimestamp| type| source ---|---|--- 2025-06-02 06:32:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5qhndffw2 2025-06-02 08:32:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqmehelfs32p 2025-07-07...

CVE-2025-5377

creationtimestamp| type| source ---|---|--- 2025-05-31 13:31:58+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqhu7by7mjc2 2025-05-31 14:06:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhw7ib54t2a...

CVE-2025-4672

creationtimestamp| type| source ---|---|--- 2025-05-31 07:12:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqh6zoqbpi42 2025-05-31 09:27:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhglxhhl42e...

CVE-2025-3230

creationtimestamp| type| source ---|---|--- 2025-05-30 15:35:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfkocqt5iv2...

CVE-2025-48334

creationtimestamp| type| source ---|---|--- 2025-05-30 10:08:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqeybv2qfae2...

CVE-2025-4943

creationtimestamp| type| source ---|---|--- 2025-05-30 08:07:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqerjzcbzwe2...

CVE-2025-48948

creationtimestamp| type| source ---|---|--- 2025-05-29 12:32:05+00:00| published-proof-of-concept| https://github.com/navidrome/navidrome/security/advisories/GHSA-f238-rggp-82m3 2025-05-30 20:15:27+00:00| seen|...

CVE-2025-48931

creationtimestamp| type| source ---|---|--- 2025-05-28 18:14:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114586815688198231...

CVE-2025-45997

creationtimestamp| type| source ---|---|--- 2025-05-28 15:22:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaiud5pwjr2 2025-05-28 15:22:48+00:00| seen|...

CVE-2025-40663

Stored Cross-Site Scripting XSS vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated attacker to upload a malicious SVG image into the user's personal space in /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments. There is no reported fix at this time...

GHSA-7VCF-F5V9-3WR6

creationtimestamp| type| source ---|---|--- 2025-05-27 16:52:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17664 2025-05-27 17:37:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114581010099043902...

CVE-2025-5262

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17631 2025-05-27 14:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq5tzngqwq2s 2025-05-28 16:03:10+00:00| seen|...

CVE-2025-23393

creationtimestamp| type| source ---|---|--- 2025-05-27 07:48:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17610 2025-05-27 08:02:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq57xkimdv62 2025-05-27 10:04:39+00:00| seen|...

CVE-2025-40663

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17558 2025-05-26 14:03:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3dp567id27 2025-05-26 15:28:55+00:00| seen|...

CVE-2025-5196

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17555 2025-05-26 15:23:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3i3nr7rcy2 2025-05-26...

CVE-2025-40663

CVE-2025-40663 describes a Stored Cross-Site Scripting (XSS) vulnerability in i2A-Cronos v23.02.01.17 (i2A). An authenticated attacker can upload a malicious SVG image into a user’s personal space at /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments, leading to script execution withi...

Fedora 41 : dotnet8.0 (2025-d62bbb5261)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d62bbb5261 advisory. This is the May 2025 update for .NET 8 for Fedora. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.16/8.0.116.md -...