266373 matches found
CVE-2024-32554
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Knight Lab Knight Lab Timeline allows Stored XSS.This issue affects Knight Lab Timeline: from n/a through 3.9.3.4...
CVE-2024-3724
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Stack Group, Photo Stack, & Horizontal Timeline widgets in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping on user supplied...
CVE-2024-37919
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pratik Chaskar Timeline Module for Beaver Builder allows Stored XSS.This issue affects Timeline Module for Beaver Builder: from n/a through 1.1.3...
CVE-2024-0977
The Timeline Widget For Elementor Elementor Timeline, Vertical & Horizontal Timeline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image URLs in the plugin's timeline widget in all versions up to, and including, 1.5.3 due to insufficient input sanitization and output...
CVE-2024-2287
The Knight Lab Timeline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.9.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2023-41364
In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection...
CVE-2022-4828
The Bold Timeline Lite WordPress plugin before 1.1.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
CVE-2022-34962
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Group Timeline module...
CVE-2021-24553
The Timeline Calendar WordPress plugin through 1.2 does not sanitise, validate or escape the edit GET parameter before using it in a SQL statement when editing events, leading to an authenticated SQL injection issue. Other SQL Injections are also present in the plugin...
CVE-2021-30290
Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2020-17363
USVN aka User-friendly SVN before 1.0.9 allows remote code execution via shell metacharacters in the numberstart or numberend parameter to LastHundredRequest aka lasthundredrequestAction in the Timeline module. NOTE: this may overlap CVE-2020-25069...
CVE-2016-20017
D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022...
CVE-2022-2404
creationtimestamp| type| source ---|---|--- 2025-05-21 19:42:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17181...
PT-2025-21745
Name of the Vulnerable Software and Affected Versions: ECOVACS robot vacuums and base stations affected versions not specified Description: ECOVACS robot vacuums and base stations communicate over an insecure Wi-Fi network. The communication utilizes AES encryption with a deterministic key that c...
CVE-2025-47885
creationtimestamp| type| source ---|---|--- 2025-05-14 22:57:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63whigzt2n 2025-05-15 13:33:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16488...
CVE-2025-37884
creationtimestamp| type| source ---|---|--- 2025-05-09 07:25:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15689 2025-05-09 08:31:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lopz7yinkc2h 2025-05-09 09:21:35+00:00| seen|...
CVE-2025-12381
creationtimestamp| type| source ---|---|--- 2025-05-07 15:48:27+00:00| seen| https://t.me/NinjaSec/300 2025-12-09 15:37:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7kuszyoqw2a 2025-12-09 17:06:54+00:00| seen| https://gist.github.com/Darkcrai86/2034f0d76c4a61e453d5194ca083327...
PT-2025-20325
ā ļø Vulnerability Alert: SysAid On-Premise Pre-Auth RCE Chain 4 Critical Flaws š Timeline: Disclosure: 2025-05-07, Patch: 2025-03-01 š CVE ID: CVE-2025-2778 š Base Score: 9.8 assessed Critical š CVSS Metrics: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H cvssSeverity:...
Towards a Standardized Methodology and Dataset for Evaluating LLM-Based Digital Forensic Timeline Analysis
Large language models LLMs have seen widespread adoption in many domains including digital forensics. While prior research has largely centered on case studies and examples demonstrating how LLMs can assist forensic investigations, deeper explorations remain limited, i.e., a standardized approach...
CVE-2025-32011
creationtimestamp| type| source ---|---|--- 2025-05-01 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01 2025-05-01 19:15:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14379 2025-05-01 20:36:00+00:00| seen|...