CVE-2025-2725

creationtimestamp| type| source ---|---|--- 2025-03-25 02:23:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8581 2025-03-25 04:01:20+00:00| published-proof-of-concept| Telegram/MXLtd6D6lDs-X3W-toegTHLzYyO4SelR8FKZM3tOB5yKLoA 2025-03-25 04:48:22+00:00| seen|...

Using Mermaid to cause JS memory overflow and service downtime

Description Librechat has many means of limiting the rate, which can be found at https://www.librechat.ai/docs/configuration/librechatyaml/objectstructure/configratelimits. However, it can be found that the Fork Function in /api/convos/fork is not restricted, which allows attackers to fork...

CVE-2025-2690

creationtimestamp| type| source ---|---|--- 2025-03-24 10:02:21+00:00| seen| https://t.me/cvedetector/20944 2025-03-24 10:34:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll4kmpjcez2h 2025-03-24 18:48:16+00:00| seen|...

CVE-2025-2672

creationtimestamp| type| source ---|---|--- 2025-03-24 01:40:55+00:00| seen| https://t.me/cvedetector/20927 2025-03-24 02:18:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll3owufyhh26...

CVE-2025-2641

creationtimestamp| type| source ---|---|--- 2025-03-23 06:30:35+00:00| published-proof-of-concept| Telegram/WIfjWCnk-An9HH4I-P8JcEMFZfcLKZQVCMzrzzJ921G1UtQ 2025-03-23 07:17:14+00:00| seen| https://t.me/cvedetector/20889 2025-03-23 07:58:58+00:00| seen|...

GHSA-X3WM-HFFR-CHWM vulnerabilities

Vulnerabilities for packages: trino...

GHSA-XWH9-GC39-5298 vulnerabilities

Vulnerabilities for packages: rclone...

CVE-2025-30179

creationtimestamp| type| source ---|---|--- 2025-03-21 11:48:00+00:00| seen| https://t.me/cvedetector/20802 2025-03-21 13:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp4qzu22s...

calva-bb-apartments.alltrentinohotels.com Cross Site Scripting vulnerability OBB-4038646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

anicausa.biz Cross Site Scripting vulnerability OBB-4038564

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

berkshires.org Cross Site Scripting vulnerability OBB-4038545

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-2585

creationtimestamp| type| source ---|---|--- 2025-03-21 02:18:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8312 2025-03-21 03:14:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkuandhnnp2n 2025-03-21 04:16:26+00:00| seen| https://t.me/cvedetector/20778 2025-03-21...

ncdsb.on.ca Cross Site Scripting vulnerability OBB-4038476

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bayerischerhof80333.munichbesthotels.com Cross Site Scripting vulnerability OBB-4038418

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bec.co.uk Cross Site Scripting vulnerability OBB-4038397

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

beach-club.goa-india-hotels-resorts.com Cross Site Scripting vulnerability OBB-4038391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bb-hotel-napoli.hotel-ds.com Cross Site Scripting vulnerability OBB-4038378

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bahay.ph Cross Site Scripting vulnerability OBB-4038360

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sheppards.ie Cross Site Scripting vulnerability OBB-4038260

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

asianwaytravel.com Cross Site Scripting vulnerability OBB-4038153

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...