Mattermost has an unspecified vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from a failure to lock out an LDAP user, which can be exploited by an attacker to lock out an external LDAP account through repeated failed...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a privilege issue vulnerability that stems from insufficient privilege validation, which can be exploited by an attacker to view group information via an API request...

Casdoor 安全漏洞

Casdoor is an open source platform from Casdoor Open Source that supports multiple authentication and authorization protocols. A security vulnerability exists in Casdoor version 1.811.0 and prior versions that stems from an authorization bypass that could lead to unauthorized access...

[SECURITY] Fedora 41 Update: pgadmin4-9.2-1.fc41

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

CVE-2025-32790

Dify is an open-source LLM app development platform. In versions 0.6.8 and prior, a vulnerability was identified in the DIFY AI where normal users are improperly granted permissions to export APP DSL. The feature in '/export' should only allow administrator users to export DSL. A workaround for...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an input validation error vulnerability that stems from insufficient props validation, which can be exploited by an attacker to cause a denial of service attack...

PT-2025-17318 · Dify · Dify

Name of the Vulnerable Software and Affected Versions: Dify versions prior to 0.6.12 Description: A vulnerability was identified in Dify, an open-source LLM app development platform, where normal users can enable or disable apps through the API, despite not being permitted to make such changes...

CVE-2024-13597

creationtimestamp| type| source ---|---|--- 2025-04-14 12:33:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl3457cn2c 2025-04-14 17:10:59+00:00| seen| https://t.me/cvedetector/22856...

CVE-2024-10904

creationtimestamp| type| source ---|---|--- 2025-04-10 19:49:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11319 2025-08-19 13:26:46+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

CVE-2025-3350

creationtimestamp| type| source ---|---|--- 2025-04-07 11:46:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10694 2025-04-07 17:04:17+00:00| seen| https://t.me/cvedetector/22312 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10...

CVE-2025-2951

creationtimestamp| type| source ---|---|--- 2025-03-30 12:31:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9548 2025-03-30 16:25:18+00:00| seen| https://t.me/cvedetector/21514 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10...

CVE-2025-2870

creationtimestamp| type| source ---|---|--- 2025-03-28 11:28:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9315 2025-03-28 13:33:47+00:00| seen| https://t.me/cvedetector/21392 2025-08-10 18:27:45+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:59+00:00| seen|...

CVE-2024-53348

creationtimestamp| type| source ---|---|--- 2025-03-21 15:19:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8351 2025-03-21 18:29:03+00:00| seen| https://t.me/cvedetector/20816 2025-03-24 18:23:00+00:00| published-proof-of-concept|...

CVE-2025-2592

creationtimestamp| type| source ---|---|--- 2025-03-21 14:19:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8337 2025-03-21 15:58:39+00:00| seen| https://t.me/cvedetector/20809 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4 2026-02-13...

CVE-2025-0431

creationtimestamp| type| source ---|---|--- 2025-03-19 17:21:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8100 2025-03-19 20:29:52+00:00| seen| https://t.me/cvedetector/20663 2025-08-12 13:33:27+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21...

CVE-2024-12380

creationtimestamp| type| source ---|---|--- 2025-03-13 08:55:51+00:00| seen| https://t.me/cvedetector/20200 2025-03-14 14:45:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7553 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2025-27617 Pimcore Vulnerable to SQL Injection in getRelationFilterCondition

Pimcore is an open source data and experience management platform. Prior to version 11.5.4, authenticated users can craft a filter string used to cause a SQL injection. Version 11.5.4 fixes the issue...

CVE-2024-38638

creationtimestamp| type| source ---|---|--- 2025-03-07 20:48:14+00:00| seen| https://t.me/cvedetector/19856 2025-08-16 01:45:14+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19 04:06:35+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0...

CVE-2025-27513

creationtimestamp| type| source ---|---|--- 2025-03-05 18:55:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6584 2025-03-05 22:47:43+00:00| seen| https://t.me/cvedetector/19654 2025-08-18 13:31:24+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19...

Linux Distros Unpatched Vulnerability : CVE-2022-39324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapshot and arbitrarily...