CVE-2025-25130

Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Traversal.This issue affects Delete Comments By Status: from n/a through = 2.1.1...

CVE-2025-25124

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devu Status Updater fb-status-updater allows Reflected XSS.This issue affects Status Updater: from n/a through = 1.9.2...

CVE-2025-25130 WordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerability

Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Traversal.This issue affects Delete Comments By Status: from n/a through = 2.1.1...

CVE-2025-25130

CVE-2025-25130 corresponds to a Relative Path Traversal that enables unauthenticated PHP Local File Inclusion in the WordPress plugin Delete Comments By Status (affected: Delete Comments By Status, versions

CVE-2025-25130 WordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerability

Relative Path Traversal vulnerability in NotFound Delete Comments By Status allows PHP Local File Inclusion. This issue affects Delete Comments By Status: from n/a through 2.1.1...

CVE-2025-25124 WordPress Status Updater Plugin <= 9.21 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devu Status Updater allows Reflected XSS. This issue affects Status Updater: from n/a through 1.9.2...

CVE-2025-25124 WordPress Status Updater Plugin <= 9.21 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devu Status Updater fb-status-updater allows Reflected XSS.This issue affects Status Updater: from n/a through = 1.9.2...

CVE-2025-25124

CVE-2025-25124 affects WordPress Status Updater (plugin versions from n/a through 1.9.2). It is a Reflected XSS due to Improper Neutralization of Input During Web Page Generation. CVSS v3.1 base score 7.1 (HIGH) with NETWORK attack vector and user interaction required. Exploitation status is not ...

CVE-2024-43057

creationtimestamp| type| source ---|---|--- 2025-03-03 11:12:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114098199144823059 2025-08-18 13:31:24+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19 02:47:46+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3...

CVE-2024-43061

creationtimestamp| type| source ---|---|--- 2025-03-03 10:30:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6188 2025-03-03 10:45:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114098092985513084...

CVE-2025-20647

creationtimestamp| type| source ---|---|--- 2025-03-03 03:33:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6140 2025-03-03 04:39:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljh4yl5zcw2a 2025-03-03 05:30:02+00:00| seen|...

CVE-2025-25950

creationtimestamp| type| source ---|---|--- 2025-03-03 01:29:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6125 2025-03-03 02:58:44+00:00| seen| https://t.me/cvedetector/19281 2025-03-06 02:16:33+00:00| seen| Telegram/LnjyeAvwJZTh3Jc9tcYXlfWG8Jfh8HLDR5AhqYK-Ww9g5pT 2025-08-19...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.2.16, which stems from stored cross-site scripting in the adicionarstatusatendido.php endpoint...

Linux Distros Unpatched Vulnerability : CVE-2011-4462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote...

CVE-2025-1832

creationtimestamp| type| source ---|---|--- 2025-03-02 21:30:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6110 2025-03-02 22:47:41+00:00| seen| https://t.me/cvedetector/19268 2025-03-02 23:39:00+00:00| seen|...

CVE-2025-1817

creationtimestamp| type| source ---|---|--- 2025-03-02 15:32:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6098 2025-03-02 16:19:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljftnvgos42x 2025-03-02 16:56:29+00:00| seen|...

CVE-2025-1815

creationtimestamp| type| source ---|---|--- 2025-03-02 09:28:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114092126136384564 2025-03-02 12:33:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6094 2025-03-02 13:30:15+00:00| published-proof-of-concept|...

Advisory ROSA-SA-2025-2736

Software: ghostscript 9.27 OS: ROSA Virtualization 3.0 packageevrstring: ghostscript-9.27-13.0.1.rv30 CVE-ID: CVE-2024-33871 BDU-ID: 2024-05064 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability exists in the contrib/opvp/gdevopvp.c component of the Ghostscript processing, conversion, and document...

Advisory ROSA-SA-2025-2734

SOFTWARE: 389-ds-base 1.4.3.23. OS: ROSA Virtualization 3.0 packageevrstring: 389-ds-base-1.4.3.23-14.rv30 CVE-ID: CVE-2021-4091 BDU-ID: 2022-05559 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the 389 Directory Server's implementation of the 389 Directory Server lookup function is related to the...

CVE-2024-41778

creationtimestamp| type| source ---|---|--- 2025-03-01 14:28:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6076 2025-03-01 18:07:12+00:00| seen| https://t.me/cvedetector/19240 2025-03-02 11:46:59+00:00| seen| Telegram/8-pJA-wH6QIq7DP1TY-QDwJ0QCRtOJEYmjE30pepVlVq3Y3A 2025-08-19...