CVE-2025-25875

creationtimestamp| type| source ---|---|--- 2025-02-21 18:19:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4953 2025-02-21 19:46:40+00:00| seen| https://t.me/cvedetector/18668 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...

CVE-2024-57716

creationtimestamp| type| source ---|---|--- 2025-02-20 19:00:32+00:00| seen| https://t.me/cvedetector/18565 2025-02-21 22:10:25+00:00| seen| Telegram/zNKhOX9IKykgAumVGRVGYO77Ff8cRAkM7CXuZsoJyjYCsrVw 2025-08-25 13:32:05+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...

BIT-DISCOURSE-2025-22602 Stored DOM-based XSS (without CSP) via video placeholders in Discourse

Discourse is an open source platform for community discussion. In affected versions an attacker can execute arbitrary JavaScript on users' browsers by posting a malicious video placeholder html element. This issue only affects sites with CSP disabled. This problem has been patched in the latest...

Mattermost Code Issue Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a code issue vulnerability that stems from a failure to properly validate a proto style provided to an action style, which can be exploited by an attacker to crash the front-end...

Mattermost Denial of Service Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a denial-of-service vulnerability that stems from an inability to properly validate post attributes, which can be exploited by an attacker to cause a system crash...

CVE-2024-53994 Potential bypass of chat permissions in Discourse

Discourse is an open source platform for community discussion. In affected versions users who disable chat in preferences could still be reachable in some cases. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA version 9.1.3, which stems from vulnerability to cross-site scripting attacks...

Unspecified Vulnerability in Magma (CNVD-2025-15071)

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a security vulnerability that can be exploited by an attacker to cause a denial of service by repeatedly crashing the M...

Magma Buffer Overflow Vulnerability

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a crafted N...

Magma null pointer dereference vulnerability (CNVD-2025-02445)

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a null pointer dereference vulnerability that can be exploited by an attacker to crash MME...

Magma 代码问题漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a null pointer dereference vulnerability that can be exploited by an attacker to crash MME...

Magma 安全漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a buffer overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a carefully crafted...

Mattermost Denial of Service Vulnerability (CNVD-2025-12635)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A denial of service vulnerability exists in Mattermost. The vulnerability stems from a failure to properly handle attachments that contain string fields. An attacker could exploit the vulnerability to...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a denial-of-service vulnerability that can be exploited by attackers to cause a system crash...

CVE-2024-57632

creationtimestamp| type| source ---|---|--- 2025-01-14 01:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3bwuox22t 2025-01-14 01:31:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113824123349562918...

Progress Sitefinity 安全漏洞

Progress Sitefinity is an open source platform for building corporate websites and intranets from Progress, Inc. in the United States. A security vulnerability exists in Progress Sitefinity that stems from improper input neutralization during web page generation, resulting in a cross-site scripti...

Progress Sitefinity 安全漏洞

Progress Sitefinity is an open source platform for building corporate websites and intranets from Progress, Inc. in the United States. A security vulnerability exists in Progress Sitefinity, which stems from an error message vulnerability that could lead to information disclosure...

CVE-2024-53220

creationtimestamp| type| source ---|---|--- 2024-12-27 14:17:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lec6knfkgt2e 2024-12-27 17:22:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113725940150356711 2025-12-03 14:14:49+00:00| seen|...

CVE-2024-49765

CVE-2024-49765 affects Discourse where sites enabling Discourse Connect alongside local login methods could allow an attacker to bypass Discourse Connect to create accounts and log in. The issue is described as a bypass of login paths rather than a remote exploit; affected component is the Discou...

CVE-2024-52794 Magnific lightbox susceptible to Cross-site Scripting in Discourse

Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in the latest version of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability...