Joomla 4.0.x < 4.4.13 / 5.0.x < 5.2.6 Joomla 5.2.6 Security Release (5925-joomla-5-2-6-security-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.0.x prior to 4.4.13 or 5.0.x prior to 5.2.6. It is, therefore, affected by a vulnerability. - Insufficient state checks lead to a vector that allows to bypass 2FA checks. CVE-2025-25227 Note that...

18acg2.vip Cross Site Scripting vulnerability OBB-4042534

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

asthayaweheal.com Cross Site Scripting vulnerability OBB-4042522

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

porngrace.com Cross Site Scripting vulnerability OBB-4042499

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-20661

creationtimestamp| type| source ---|---|--- 2025-04-07 03:44:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10669 2025-04-07 07:17:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm7g63bk7k2f 2025-04-07 08:42:05+00:00| seen| https://t.me/cvedetector/22262...

encyclopaedia.herdereditorial.com Cross Site Scripting vulnerability OBB-4042465

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-15909 · Crates.Io · Tokio

The broadcast channel internally calls clone on the stored value when receiving it, and only requires T:Send. This means that using the broadcast channel with values that are Send but not Sync can trigger unsoundness if the clone implementation makes use of the value being !Sync. Thank you to...

gehaltskasse.at Cross Site Scripting vulnerability OBB-4042414

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-56370

creationtimestamp| type| source ---|---|--- 2025-04-05 18:38:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10610 2025-04-05 21:06:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm3tkypas52o 2025-04-05 23:16:21+00:00| seen| https://t.me/cvedetector/22196...

pfarreiengemeinschaftfreren.de Cross Site Scripting vulnerability OBB-4042353

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

alvarotrigo.com Cross Site Scripting vulnerability OBB-4042291

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lacunza.es Cross Site Scripting vulnerability OBB-4042272

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-2075

creationtimestamp| type| source ---|---|--- 2025-04-04 04:35:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10390 2025-04-04 07:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114278590519821899 2025-04-04 07:48:28+00:00| seen|...

wheelpros.com Cross Site Scripting vulnerability OBB-4042211

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wirtschaftlichefreiheit.de Cross Site Scripting vulnerability OBB-4042123

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

worldflower.net Cross Site Scripting vulnerability OBB-4042063

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3161

creationtimestamp| type| source ---|---|--- 2025-04-03 15:50:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274824494198093 2025-04-03 15:50:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274824494198093 2025-04-03 17:48:26+00:00| seen|...

medisoftware.de Cross Site Scripting vulnerability OBB-4041975

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rodemshoes.com Cross Site Scripting vulnerability OBB-4041841

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3070

creationtimestamp| type| source ---|---|--- 2025-04-02 03:01:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llsfizxarv2h 2025-04-02 04:06:58+00:00| seen| https://t.me/cvedetector/21832 2025-04-02 10:49:10+00:00| seen|...