EUVD-2022-38798

Malicious code in bioql PyPI...

CVE-2025-40933

creationtimestamp| type| source ---|---|--- 2025-09-17 15:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz24jszhz62a 2025-09-17 16:55:09+00:00| seen| https://gist.github.com/Darkcrai86/998a31f20c5bf6bc073cb655f43337be...

CVE-2025-5993

creationtimestamp| type| source ---|---|--- 2025-09-08 12:55:18+00:00| seen| https://t.me/canyoupwnme/6946 2025-09-08 12:55:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydauq2m2x2r 2025-09-08 13:15:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydbyjpfui26...

Exploit for CVE-2014-7911

Security-Data-Analysis-and-Visualization 2018-2020青年安全圈-活跃技术博主/博客 声明 所有数据均来自且仅来自公开信息，未加入个人先验知识，如有疑义，请及时联系[email protected]。 公开这批数据是为了大家一起更快更好地学习，请不要滥用这批数据，由此引发的问题，本人将概不负责。 对这批数据的分析文章首发在个人微信公众号，原文为：我分析了2018-2020年青年安全圈450个活跃技术博客和博主，转载请联系作者。 Why - 最初目的：个人日常安全阅读资源不足，需要从博客、Github、Twitter等多个数据源补充。 -...

CVE-2024-56339

creationtimestamp| type| source ---|---|--- 2025-07-17 13:20:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3lu5zj3fenn2b 2025-07-17 13:30:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3lu622welul2m 2025-07-17 14:10:03+00:00| seen|...

CVE-2025-34038

creationtimestamp| type| source ---|---|--- 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-24 03:48:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19305 2025-06-25 21:02:24+00:00| seen|...

CVE-2023-42451

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc2, under certain circumstances, attackers can exploit a flaw in domain name normalization to spoof domains they do not own. Versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc...

CVE-2023-36461

Mastodon is a free, open-source social network server based on ActivityPub. When performing outgoing HTTP queries, Mastodon sets a timeout on individual read operations. Prior to versions 3.5.9, 4.0.5, and 4.1.3, a malicious server can indefinitely extend the duration of the response through...

CVE-2022-23543

Silverware Games is a social network where people can play games online. Users can attach URLs to YouTube videos, the site will generate related when the post will be published. The handler has some sort of protection so non-YouTube links can't be posted, as well as HTML tags are being stripped...

CVE-2022-41633

Cross-Site Request Forgery CSRF vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin = 6.0.2.0 versions...

CVE-2022-1418

The Social Stickers WordPress plugin through 2.2.9 does not have CSRF checks in place when updating its Social Network settings, and does not escape some of these fields, which could allow attackers to make a logged-in admin change them and lead to Stored Cross-Site Scripting issues...

CVE-2022-40405

WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs...

CVE-2022-34965

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/cominstaller. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this ...

Malicious code in social-network-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89279e5bb7b18cd7f18b0018f976d1e055fbeb331245019a6c3e75796c3bf1e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4024 Malicious code in social-network-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89279e5bb7b18cd7f18b0018f976d1e055fbeb331245019a6c3e75796c3bf1e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-0137

creationtimestamp| type| source ---|---|--- 2025-05-14 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0137 2025-05-14 18:31:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16363 2025-05-14 19:03:21+00:00| seen|...

CVE-2024-13913

creationtimestamp| type| source ---|---|--- 2025-03-14 05:46:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7530 2025-03-14 07:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114159682393652236 2025-03-14 08:20:44+00:00| seen| https://t.me/cvedetector/20265...

CVE-2025-26794

creationtimestamp| type| source ---|---|--- 2025-02-19 22:30:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3liktatmz6o2b 2025-02-21 13:18:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4884 2025-02-21 15:26:58+00:00| seen|...

CERTFR-2020-ALE-003

creationtimestamp| type| source ---|---|--- 2025-01-29 16:32:15+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfh4ryhl2a...

CVE-2024-13370 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license)

The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the saveaddonkeylicense function in all versions up to, and including, 1.3.3. This makes it possible fo...