CVE-2025-32668

creationtimestamp| type| source ---|---|--- 2025-04-10 09:49:03+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114313038137311581 2025-04-10 11:10:32+00:00| seen| https://t.me/cvedetector/22625 2025-04-10 11:32:39+00:00| seen|...

CVE-2025-3475

creationtimestamp| type| source ---|---|--- 2025-04-09 18:00:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114309307406934504 2025-04-09 18:48:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11133 2025-04-09 20:57:09+00:00| seen| https://t.me/cvedetector/22566...

CVE-2025-32616

Cross-Site Request Forgery CSRF vulnerability in nimbata Nimbata Call Tracking nimbata-call-tracking allows Stored XSS.This issue affects Nimbata Call Tracking: from n/a through = 1.7.4...

CVE-2025-32616

CVE-2025-32616 is a CSRF to Stored XSS vulnerability in Nimbata Call Tracking. Affected: Nimbata Call Tracking versions up to 1.7.1 (from n/a through 1.7.1). Impact per CVSS: high severity (base 7.1; confidentiality, integrity, and availability impact listed as low). Remediation status: no patch ...

CVE-2025-32616 WordPress Nimbata Call Tracking plugin <= 1.7.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in nimbata Nimbata Call Tracking nimbata-call-tracking allows Stored XSS.This issue affects Nimbata Call Tracking: from n/a through = 1.7.4...

GHSA-7V4R-C989-XH26

creationtimestamp| type| source ---|---|--- 2025-04-09 15:47:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11098 2025-04-09 15:56:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114308819955492247...

WordPress Nimbata Call Tracking plugin <= 1.7.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Abdi Pranata in WordPress Plugin Nimbata Call Tracking versions = 1.7.4...

CVE-2017-20197 propanetank Roommate-Bill-Tracking login.php sql injection

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

CVE-2017-20197 propanetank Roommate-Bill-Tracking login.php sql injection

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

PT-2025-15802 · Nimbata · Nimbata Call Tracking

Name of the Vulnerable Software and Affected Versions: Nimbata Call Tracking versions 1.7.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...

Roommate-Bill-Tracking 注入漏洞

Roommate-Bill-Tracking is a relatively simple PHP application by Hayden Individual Developer for managing expenses between roommates and shared grocery lists. Roommate-Bill-Tracking suffers from an injection vulnerability that stems from the fact that incorrect manipulation of the parameter...

WordPress plugin Nimbata Call Tracking 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-3285

creationtimestamp| type| source ---|---|--- 2025-04-08 19:22:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmd756ore525 2025-04-09 13:15:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114308189037550499 2025-04-10 10:00:00+00:00| seen|...

GHSA-X82R-6J37-VRGG

creationtimestamp| type| source ---|---|--- 2025-04-08 11:46:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10897...

CVE-2025-22012

creationtimestamp| type| source ---|---|--- 2025-04-08 11:43:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114302162564110651 2025-04-08 14:00:01+00:00| seen| https://t.me/cvedetector/22449...

CVE-2025-26657

creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10870 2025-04-08 09:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5ciekjs2f 2025-04-08 11:29:15+00:00| seen| https://t.me/cvedetector/22428...

CVE-2025-3324

creationtimestamp| type| source ---|---|--- 2025-04-06 22:44:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10644 2025-04-07 02:50:32+00:00| seen| https://t.me/cvedetector/22232 2025-04-07 03:07:27+00:00| seen|...

CVE-2024-13744

creationtimestamp| type| source ---|---|--- 2025-04-04 04:35:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10389 2025-04-04 07:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114278590468850131 2025-04-04 07:48:27+00:00| seen|...

CVE-2024-56528

creationtimestamp| type| source ---|---|--- 2025-04-03 20:35:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10337 2025-04-03 22:05:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114276298770722682 2025-04-03 22:05:38+00:00| seen|...

Location, name, and photos of random kids shown to parents in child tracker mix up

Not one but several worried parents that tracked their children by using T-Mobile tracking devices suddenly found that they were looking at the location of random other children. And could not locate their own. T-Mobile sells a small GPS tracker called SyncUP, which can be used to track, among...